====OS Data==== 2025-12-02T11:35:13Z User: Name: DESKTOP-ORDL0UQ\GT Admin: Yes Hostname: ComputerNameNetBIOS: DESKTOP-ORDL0UQ ComputerNameDnsHostname: DESKTOP-ORDL0UQ ComputerNameDnsFullyQualified: DESKTOP-ORDL0UQ ComputerNamePhysicalNetBIOS: DESKTOP-ORDL0UQ ComputerNamePhysicalDnsHostname: DESKTOP-ORDL0UQ ComputerNamePhysicalDnsFullyQualified: DESKTOP-ORDL0UQ Version: MajorVersion: 10 MinorVersion: 0 BuildNumber: 26100 ServicePackMajor: 0 ServicePackMinor: 0 MajorVersion: 0x00000100 ProductType: 0x00000001 Firmware: Type: UEFI Times: Boot: 2025-12-02T11:34:12Z ====Process Details==== 2025-12-02T11:35:13Z PID: 0 Name: [System Process] PPID: 0 Threads: 24 IOCount: Read: 0 Write: 0 Other: 0 PID: 4 Name: System PPID: 0 Threads: 254 Path: Cmdline: ???? Times: Start: 2025-12-02T11:34:31Z Kernel: 14265ms User: 0ms IOCount: Read: 162 Write: 513 Other: 28424 PID: 172 Name: Registry PPID: 4 Threads: 4 Path: Registry Cmdline: ???? User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:09Z Kernel: 1015ms User: 0ms IOCount: Read: 144 Write: 26 Other: 158 PID: 716 Name: smss.exe PPID: 4 Threads: 5 Path: C:\Windows\System32\smss.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:31Z Kernel: 93ms User: 15ms IOCount: Read: 24 Write: 13 Other: 636 PID: 892 Name: csrss.exe PPID: 860 Threads: 15 Path: C:\Windows\System32\csrss.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:35Z Kernel: 156ms User: 187ms IOCount: Read: 166 Write: 0 Other: 3956 PID: 964 Name: wininit.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\wininit.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 15ms IOCount: Read: 3 Write: 2 Other: 422 PID: 972 Name: csrss.exe PPID: 956 Threads: 14 Path: C:\Windows\System32\csrss.exe User: NT AUTHORITY\SYSTEM Session: 1 Times: Start: 2025-12-02T11:34:36Z Kernel: 46ms User: 15ms IOCount: Read: 48 Write: 0 Other: 1203 PID: 804 Name: winlogon.exe PPID: 956 Threads: 6 Path: C:\Windows\System32\winlogon.exe Cmdline: winlogon.exe User: NT AUTHORITY\SYSTEM Session: 1 Times: Start: 2025-12-02T11:34:36Z Kernel: 46ms User: 31ms IOCount: Read: 2 Write: 0 Other: 276 PID: 860 Name: services.exe PPID: 964 Threads: 13 Path: C:\Windows\System32\services.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 406ms User: 250ms IOCount: Read: 31 Write: 1 Other: 3520 PID: 1052 Name: lsass.exe PPID: 964 Threads: 18 Path: C:\Windows\System32\lsass.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 265ms User: 296ms IOCount: Read: 59 Write: 33 Other: 3487 PID: 1192 Name: svchost.exe PPID: 860 Threads: 37 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 453ms User: 343ms IOCount: Read: 67 Write: 1 Other: 5486 PID: 1224 Name: fontdrvhost.exe PPID: 964 Threads: 6 Path: C:\Windows\System32\fontdrvhost.exe Cmdline: "fontdrvhost.exe" User: Font Driver Host\UMFD-0 Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 46ms IOCount: Read: 0 Write: 0 Other: 15 PID: 1232 Name: fontdrvhost.exe PPID: 804 Threads: 6 Path: C:\Windows\System32\fontdrvhost.exe Cmdline: "fontdrvhost.exe" User: Font Driver Host\UMFD-1 Session: 1 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 0 Other: 11 PID: 1328 Name: svchost.exe PPID: 860 Threads: 16 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k RPCSS -p User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 375ms User: 500ms IOCount: Read: 9 Write: 0 Other: 1653 PID: 1372 Name: svchost.exe PPID: 860 Threads: 9 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 156ms User: 93ms IOCount: Read: 2 Write: 4 Other: 231 PID: 1464 Name: LogonUI.exe PPID: 804 Threads: 28 Path: C:\Windows\System32\LogonUI.exe Cmdline: "LogonUI.exe" /flags:0x2 /state0:0xa3b9d855 /state1:0x41c64e6d User: NT AUTHORITY\SYSTEM Session: 1 Times: Start: 2025-12-02T11:34:36Z Kernel: 156ms User: 78ms IOCount: Read: 4 Write: 2 Other: 1272 PID: 1472 Name: dwm.exe PPID: 804 Threads: 30 Path: C:\Windows\System32\dwm.exe Cmdline: "dwm.exe" User: Window Manager\DWM-1 Session: 1 Times: Start: 2025-12-02T11:34:36Z Kernel: 312ms User: 109ms IOCount: Read: 2 Write: 0 Other: 963 PID: 1540 Name: svchost.exe PPID: 860 Threads: 9 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k GPSvcGroup User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 15ms IOCount: Read: 1 Write: 1 Other: 213 PID: 1556 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k NetworkService -p User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 484ms User: 406ms IOCount: Read: 17553 Write: 63 Other: 1602 PID: 1564 Name: svchost.exe PPID: 860 Threads: 38 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k NetworkService -s TermService User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 296ms User: 359ms IOCount: Read: 1432 Write: 2088 Other: 1029 PID: 1576 Name: svchost.exe PPID: 860 Threads: 4 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s PrintDeviceConfigurationService User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 0 Other: 15 PID: 1600 Name: svchost.exe PPID: 860 Threads: 13 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BDESVC User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 46ms IOCount: Read: 5 Write: 0 Other: 1888 PID: 1808 Name: svchost.exe PPID: 860 Threads: 18 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 140ms User: 140ms IOCount: Read: 2 Write: 3 Other: 912 PID: 1840 Name: svchost.exe PPID: 860 Threads: 10 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 15ms User: 15ms IOCount: Read: 0 Write: 0 Other: 216 PID: 1852 Name: svchost.exe PPID: 860 Threads: 8 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k UserProfileService -p -s ProfSvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 15ms User: 46ms IOCount: Read: 58 Write: 0 Other: 542 PID: 1940 Name: svchost.exe PPID: 860 Threads: 13 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 46ms User: 15ms IOCount: Read: 0 Write: 1 Other: 194 PID: 2000 Name: svchost.exe PPID: 860 Threads: 5 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 31ms IOCount: Read: 0 Write: 0 Other: 24 PID: 2008 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 0 Other: 111 PID: 2016 Name: svchost.exe PPID: 860 Threads: 9 Path: C:\Windows\System32\svchost.exe User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 15ms User: 62ms IOCount: Read: 24 Write: 2 Other: 688 PID: 1368 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s UmRdpService User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 15ms IOCount: Read: 4 Write: 3 Other: 346 PID: 1716 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 15ms IOCount: Read: 0 Write: 0 Other: 184 PID: 2080 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s vmickvpexchange User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 15ms IOCount: Read: 24 Write: 23 Other: 50 PID: 2088 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k ICService -p -s vmicheartbeat User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 15ms User: 0ms IOCount: Read: 19 Write: 18 Other: 98 PID: 2096 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s vmicguestinterface User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 0ms IOCount: Read: 2 Write: 1 Other: 49 PID: 2132 Name: svchost.exe PPID: 860 Threads: 16 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k ICService -p -s vmicrdv User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 0ms IOCount: Read: 2 Write: 1 Other: 102 PID: 2156 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s vmicshutdown User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 0ms IOCount: Read: 2 Write: 1 Other: 49 PID: 2228 Name: upfc.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\upfc.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 0ms IOCount: Read: 6 Write: 0 Other: 324 PID: 2240 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s vmicvss User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 15ms User: 15ms IOCount: Read: 2 Write: 1 Other: 80 PID: 2248 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s vmictimesync User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 15ms User: 0ms IOCount: Read: 9 Write: 8 Other: 50 PID: 2316 Name: svchost.exe PPID: 860 Threads: 5 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 0ms IOCount: Read: 0 Write: 16 Other: 130 PID: 2444 Name: svchost.exe PPID: 860 Threads: 10 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -s CertPropSvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 31ms User: 31ms IOCount: Read: 3 Write: 76 Other: 549 PID: 2480 Name: svchost.exe PPID: 860 Threads: 35 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k netprofm -p -s netprofm User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 62ms User: 46ms IOCount: Read: 1 Write: 1 Other: 871 PID: 2572 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:36Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 0 Other: 39 PID: 2676 Name: VSSVC.exe PPID: 860 Threads: 9 Path: C:\Windows\System32\VSSVC.exe Cmdline: C:\WINDOWS\system32\vssvc.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 31ms User: 0ms IOCount: Read: 0 Write: 0 Other: 174 PID: 2764 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 31ms User: 15ms IOCount: Read: 37 Write: 26 Other: 283 PID: 2776 Name: svchost.exe PPID: 860 Threads: 13 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 281ms User: 171ms IOCount: Read: 684 Write: 35 Other: 1087 PID: 2784 Name: svchost.exe PPID: 860 Threads: 9 Path: C:\Windows\System32\svchost.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 312ms User: 484ms IOCount: Read: 122 Write: 1 Other: 8805 PID: 2844 Name: svchost.exe PPID: 860 Threads: 10 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 31ms User: 15ms IOCount: Read: 35 Write: 0 Other: 52 PID: 2856 Name: svchost.exe PPID: 860 Threads: 5 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 15ms User: 0ms IOCount: Read: 0 Write: 0 Other: 46 PID: 2864 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 343ms User: 0ms IOCount: Read: 1 Write: 0 Other: 3258 PID: 2184 Name: svchost.exe PPID: 860 Threads: 11 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s SessionEnv User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 31ms User: 15ms IOCount: Read: 2 Write: 1 Other: 339 PID: 2204 Name: Memory Compression PPID: 4 Threads: 62 Path: MemCompression Cmdline: ???? User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 0 Other: 0 PID: 2588 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k NetworkService -p User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 15ms User: 31ms IOCount: Read: 2 Write: 0 Other: 479 PID: 3076 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 15ms User: 31ms IOCount: Read: 111 Write: 0 Other: 103 PID: 3172 Name: svchost.exe PPID: 860 Threads: 11 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 125ms User: 156ms IOCount: Read: 0 Write: 0 Other: 1151 PID: 3180 Name: svchost.exe PPID: 860 Threads: 5 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 46ms User: 0ms IOCount: Read: 0 Write: 0 Other: 166 PID: 3436 Name: svchost.exe PPID: 860 Threads: 13 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 62ms User: 46ms IOCount: Read: 0 Write: 0 Other: 333 PID: 3540 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TextInputManagementService User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 15ms User: 0ms IOCount: Read: 0 Write: 0 Other: 219 PID: 3636 Name: svchost.exe PPID: 860 Threads: 11 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 0ms User: 15ms IOCount: Read: 0 Write: 0 Other: 139 PID: 3644 Name: svchost.exe PPID: 860 Threads: 11 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:39Z Kernel: 31ms User: 0ms IOCount: Read: 0 Write: 0 Other: 178 PID: 3780 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceHttp -p User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 31ms User: 15ms IOCount: Read: 0 Write: 0 Other: 507 PID: 3828 Name: svchost.exe PPID: 860 Threads: 25 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 0ms User: 31ms IOCount: Read: 0 Write: 0 Other: 290 PID: 3856 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 31ms User: 31ms IOCount: Read: 4 Write: 0 Other: 1195 PID: 4012 Name: spoolsv.exe PPID: 860 Threads: 20 Path: C:\Windows\System32\spoolsv.exe Cmdline: C:\WINDOWS\System32\spoolsv.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 218ms User: 125ms IOCount: Read: 47 Write: 22 Other: 2005 PID: 4068 Name: svchost.exe PPID: 860 Threads: 19 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 171ms User: 93ms IOCount: Read: 1 Write: 2 Other: 1432 PID: 3304 Name: svchost.exe PPID: 860 Threads: 10 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 484ms User: 453ms IOCount: Read: 5981 Write: 3797 Other: 452 PID: 3532 Name: svchost.exe PPID: 860 Threads: 23 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k utcsvc -p User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 609ms User: 906ms IOCount: Read: 359 Write: 56 Other: 5609 PID: 3516 Name: svchost.exe PPID: 860 Threads: 18 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 46ms User: 46ms IOCount: Read: 1 Write: 1 Other: 437 PID: 3120 Name: svchost.exe PPID: 860 Threads: 21 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 156ms User: 31ms IOCount: Read: 531 Write: 5 Other: 711 PID: 3588 Name: svchost.exe PPID: 860 Threads: 5 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 15ms User: 31ms IOCount: Read: 44 Write: 0 Other: 124 PID: 3740 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 15ms User: 15ms IOCount: Read: 0 Write: 0 Other: 67 PID: 3804 Name: MpDefenderCoreService.exe PPID: 860 Threads: 12 Path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpDefenderCoreService.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 218ms User: 31ms IOCount: Read: 133 Write: 5 Other: 6097 PID: 1008 Name: svchost.exe PPID: 860 Threads: 15 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 218ms User: 234ms IOCount: Read: 4677 Write: 0 Other: 420 PID: 4004 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k WSAIFabricSvcGroup -p -s WSAIFabricSvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 0ms User: 15ms IOCount: Read: 0 Write: 0 Other: 71 PID: 2852 Name: MsMpEng.exe PPID: 860 Threads: 50 Path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 1328ms User: 6765ms IOCount: Read: 711 Write: 568 Other: 36229 PID: 4224 Name: svchost.exe PPID: 860 Threads: 8 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 0ms User: 0ms IOCount: Read: 15 Write: 11 Other: 468 PID: 4632 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 109ms User: 78ms IOCount: Read: 42 Write: 0 Other: 1461 PID: 4744 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 0ms User: 15ms IOCount: Read: 0 Write: 0 Other: 198 PID: 4880 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k osprivacy -p -s camsvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 109ms User: 78ms IOCount: Read: 121 Write: 2 Other: 189 PID: 4888 Name: svchost.exe PPID: 860 Threads: 9 Path: C:\Windows\System32\svchost.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:40Z Kernel: 78ms User: 0ms IOCount: Read: 109 Write: 0 Other: 684 PID: 5068 Name: AggregatorHost.exe PPID: 3532 Threads: 6 Path: C:\Windows\System32\AggregatorHost.exe Cmdline: AggregatorHost.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:41Z Kernel: 31ms User: 62ms IOCount: Read: 24 Write: 0 Other: 451 PID: 764 Name: csrss.exe PPID: 604 Threads: 17 Path: C:\Windows\System32\csrss.exe User: NT AUTHORITY\SYSTEM Session: 2 Times: Start: 2025-12-02T11:34:43Z Kernel: 125ms User: 140ms IOCount: Read: 347 Write: 0 Other: 3993 PID: 1176 Name: winlogon.exe PPID: 604 Threads: 9 Path: C:\Windows\System32\winlogon.exe Cmdline: winlogon.exe {54EDD9B6-52EF-494A-AADC-0914F628B6FA} User: NT AUTHORITY\SYSTEM Session: 2 Times: Start: 2025-12-02T11:34:43Z Kernel: 15ms User: 31ms IOCount: Read: 3 Write: 0 Other: 526 PID: 5340 Name: fontdrvhost.exe PPID: 1176 Threads: 5 Path: C:\Windows\System32\fontdrvhost.exe Cmdline: "fontdrvhost.exe" User: Font Driver Host\UMFD-2 Session: 2 Times: Start: 2025-12-02T11:34:43Z Kernel: 15ms User: 15ms IOCount: Read: 0 Write: 0 Other: 23 PID: 5348 Name: WUDFHost.exe PPID: 860 Threads: 14 Path: C:\Windows\System32\WUDFHost.exe Cmdline: "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a41397d2-0b9b-474e-84d4-afd634a095fb -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-ae7a2b7a-b9c9-4fd3-adc9-749e4ccb9213 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-9fc8b80f-2f60-46bf-884e-04ab243588e7 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-aad421fb-bc2b-488a-b664-8bb3292a06f6 -LifetimeId:09700ba9-5b4d-46ea-8020-1c554e62765f -DeviceGroupId: -HostArg:16 User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:43Z Kernel: 31ms User: 31ms IOCount: Read: 0 Write: 0 Other: 545 PID: 5384 Name: dwm.exe PPID: 1176 Threads: 33 Path: C:\Windows\System32\dwm.exe Cmdline: "dwm.exe" User: Window Manager\DWM-2 Session: 2 Times: Start: 2025-12-02T11:34:43Z Kernel: 406ms User: 187ms IOCount: Read: 296 Write: 0 Other: 951 PID: 5744 Name: svchost.exe PPID: 860 Threads: 6 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -s ScDeviceEnum User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:43Z Kernel: 15ms User: 31ms IOCount: Read: 0 Write: 0 Other: 259 PID: 5936 Name: svchost.exe PPID: 860 Threads: 11 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s DsmSvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:43Z Kernel: 156ms User: 156ms IOCount: Read: 0 Write: 0 Other: 3183 PID: 5480 Name: WmiPrvSE.exe PPID: 1192 Threads: 10 Path: C:\Windows\System32\wbem\WmiPrvSE.exe Cmdline: C:\WINDOWS\system32\wbem\wmiprvse.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:45Z Kernel: 15ms User: 31ms IOCount: Read: 0 Write: 0 Other: 233 PID: 5368 Name: dllhost.exe PPID: 1192 Threads: 9 Path: C:\Windows\System32\dllhost.exe Cmdline: C:\WINDOWS\system32\DllHost.exe /Processid:{6C752774-29FB-4E50-8BB1-97098425A77C} User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:45Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 0 Other: 87 PID: 5456 Name: svchost.exe PPID: 860 Threads: 8 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k WerSvcGroup User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:46Z Kernel: 0ms User: 0ms IOCount: Read: 0 Write: 3392 Other: 484 PID: 3512 Name: svchost.exe PPID: 860 Threads: 14 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k WebThreatDefense -p -s webthreatdefsvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:47Z Kernel: 15ms User: 0ms IOCount: Read: 0 Write: 0 Other: 553 PID: 4928 Name: rdpclip.exe PPID: 1564 Threads: 16 Path: C:\Windows\System32\rdpclip.exe Cmdline: rdpclip User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:47Z Kernel: 78ms User: 31ms IOCount: Read: 164 Write: 19 Other: 229 PID: 2792 Name: sihost.exe PPID: 1940 Threads: 25 Path: C:\Windows\System32\sihost.exe Cmdline: sihost.exe User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:47Z Kernel: 375ms User: 359ms IOCount: Read: 45 Write: 0 Other: 3810 PID: 6220 Name: svchost.exe PPID: 860 Threads: 16 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:47Z Kernel: 93ms User: 15ms IOCount: Read: 51 Write: 10 Other: 585 PID: 6276 Name: svchost.exe PPID: 860 Threads: 10 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvc User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:47Z Kernel: 31ms User: 0ms IOCount: Read: 0 Write: 0 Other: 72 PID: 6332 Name: svchost.exe PPID: 860 Threads: 16 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:47Z Kernel: 156ms User: 109ms IOCount: Read: 364 Write: 316 Other: 727 PID: 6392 Name: svchost.exe PPID: 860 Threads: 14 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:47Z Kernel: 156ms User: 171ms IOCount: Read: 0 Write: 0 Other: 2392 PID: 6404 Name: MicrosoftEdgeUpdate.exe PPID: 1808 Threads: 7 Path: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:47Z Kernel: 109ms User: 46ms IOCount: Read: 1 Write: 31 Other: 455 PID: 6412 Name: taskhostw.exe PPID: 1808 Threads: 11 Path: C:\Windows\System32\taskhostw.exe Cmdline: taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:47Z Kernel: 46ms User: 0ms IOCount: Read: 58 Write: 68 Other: 1399 PID: 6688 Name: sppsvc.exe PPID: 860 Threads: 11 Path: C:\Windows\System32\sppsvc.exe User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:47Z Kernel: 453ms User: 328ms IOCount: Read: 21271 Write: 7 Other: 797 PID: 6752 Name: svchost.exe PPID: 860 Threads: 15 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:48Z Kernel: 62ms User: 62ms IOCount: Read: 11 Write: 4 Other: 613 PID: 6796 Name: explorer.exe PPID: 6700 Threads: 93 Path: C:\Windows\explorer.exe Cmdline: C:\WINDOWS\Explorer.EXE User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 1687ms User: 1437ms IOCount: Read: 243 Write: 15 Other: 13307 PID: 6860 Name: ShellHost.exe PPID: 2792 Threads: 14 Path: C:\Windows\System32\ShellHost.exe Cmdline: "C:\Windows\System32\ShellHost.exe" User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 78ms User: 31ms IOCount: Read: 1 Write: 0 Other: 579 PID: 7096 Name: svchost.exe PPID: 860 Threads: 8 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:48Z Kernel: 0ms User: 15ms IOCount: Read: 3 Write: 0 Other: 472 PID: 7116 Name: SppExtComObj.Exe PPID: 1192 Threads: 8 Path: C:\Windows\System32\SppExtComObj.Exe Cmdline: C:\WINDOWS\system32\SppExtComObj.exe -Embedding User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:48Z Kernel: 15ms User: 31ms IOCount: Read: 42 Write: 0 Other: 212 PID: 6156 Name: CrossDeviceResume.exe PPID: 2792 Threads: 14 Path: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe Cmdline: "C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe" /tileid MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 156ms User: 109ms IOCount: Read: 11 Write: 0 Other: 1903 PID: 6968 Name: svchost.exe PPID: 860 Threads: 17 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 46ms User: 0ms IOCount: Read: 0 Write: 0 Other: 286 PID: 7236 Name: MicrosoftEdgeUpdate.exe PPID: 6404 Threads: 5 Path: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource core User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:48Z Kernel: 15ms User: 15ms IOCount: Read: 1 Write: 31 Other: 313 PID: 7536 Name: SearchHost.exe PPID: 1192 Threads: 35 Path: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe Cmdline: "C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 671ms User: 796ms IOCount: Read: 1331 Write: 637 Other: 6359 PID: 7544 Name: StartMenuExperienceHost.exe PPID: 1192 Threads: 39 Path: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe Cmdline: "C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 375ms User: 531ms IOCount: Read: 96 Write: 10 Other: 4028 PID: 7640 Name: Widgets.exe PPID: 1192 Threads: 11 Path: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe Cmdline: "C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe" -ServerName:Microsoft.Windows.DashboardServer User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 31ms User: 15ms IOCount: Read: 1 Write: 0 Other: 361 PID: 7740 Name: RuntimeBroker.exe PPID: 1192 Threads: 20 Path: C:\Windows\System32\RuntimeBroker.exe Cmdline: C:\Windows\System32\RuntimeBroker.exe -Embedding User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 140ms User: 140ms IOCount: Read: 5 Write: 0 Other: 1612 PID: 7764 Name: svchost.exe PPID: 860 Threads: 12 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvc User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 46ms User: 15ms IOCount: Read: 2 Write: 0 Other: 678 PID: 7840 Name: RuntimeBroker.exe PPID: 1192 Threads: 16 Path: C:\Windows\System32\RuntimeBroker.exe Cmdline: C:\Windows\System32\RuntimeBroker.exe -Embedding User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:48Z Kernel: 203ms User: 93ms IOCount: Read: 29 Write: 4 Other: 2205 PID: 6956 Name: svchost.exe PPID: 860 Threads: 14 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:49Z Kernel: 0ms User: 31ms IOCount: Read: 1 Write: 0 Other: 151 PID: 7916 Name: backgroundTaskHost.exe PPID: 1192 Threads: 10 Path: C:\Windows\System32\backgroundTaskHost.exe Cmdline: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:SettingsUXHostApp.AppXbcemfss8fnwzwnsjec8qzh0c3jnkn6x0.mca User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 31ms User: 31ms IOCount: Read: 4 Write: 1 Other: 331 PID: 8160 Name: backgroundTaskHost.exe PPID: 1192 Threads: 11 Path: C:\Windows\System32\backgroundTaskHost.exe Cmdline: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXfkd8mejksk4ancwf4vtyhmkvtzn1jcbs.mca User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 15ms User: 15ms IOCount: Read: 4 Write: 1 Other: 363 PID: 8224 Name: svchost.exe PPID: 860 Threads: 7 Path: C:\Windows\System32\svchost.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:49Z Kernel: 15ms User: 31ms IOCount: Read: 746 Write: 2 Other: 459 PID: 8532 Name: msedgewebview2.exe PPID: 7536 Threads: 57 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SearchHost.exe --webview-exe-version=2125.17400.40.0 --user-data-dir="C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --noerrdialogs --disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --enable-features=msEdgeFluentOverlayScrollbar --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --lang=en-US --mojo-named-platform-channel-pipe=7536.8496.3940438119988388548 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 546ms User: 406ms IOCount: Read: 2019 Write: 1932 Other: 8812 PID: 8564 Name: ctfmon.exe PPID: 3540 Threads: 19 Path: C:\Windows\System32\ctfmon.exe Cmdline: /QuitInfo:00000000000002AC;00000000000002B0; User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 109ms User: 15ms IOCount: Read: 3 Write: 1 Other: 438 PID: 8608 Name: taskhostw.exe PPID: 1808 Threads: 9 Path: C:\Windows\System32\taskhostw.exe Cmdline: taskhostw.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:49Z Kernel: 62ms User: 46ms IOCount: Read: 2 Write: 0 Other: 504 PID: 8756 Name: msedgewebview2.exe PPID: 8532 Threads: 11 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView /prefetch:4 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --metrics-dir=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=141.0.7390.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=141.0.3537.99 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7fff8236a9d8,0x7fff8236a9e4,0x7fff8236a9f0 User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 0ms User: 31ms IOCount: Read: 16 Write: 7 Other: 125 PID: 8880 Name: dllhost.exe PPID: 1192 Threads: 9 Path: C:\Windows\System32\dllhost.exe Cmdline: C:\WINDOWS\system32\DllHost.exe /Processid:{133EAC4F-5891-4D04-BADA-D84870380A80} User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:49Z Kernel: 0ms User: 31ms IOCount: Read: 1 Write: 0 Other: 70 PID: 8904 Name: RuntimeBroker.exe PPID: 1192 Threads: 9 Path: C:\Windows\System32\RuntimeBroker.exe Cmdline: C:\Windows\System32\RuntimeBroker.exe -Embedding User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 0ms User: 15ms IOCount: Read: 2 Write: 0 Other: 169 PID: 8992 Name: RuntimeBroker.exe PPID: 1192 Threads: 9 Path: C:\Windows\System32\RuntimeBroker.exe Cmdline: C:\Windows\System32\RuntimeBroker.exe -Embedding User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 15ms User: 15ms IOCount: Read: 2 Write: 0 Other: 169 PID: 9084 Name: msedgewebview2.exe PPID: 8532 Threads: 26 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --user-data-dir="C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.17400.40.0 --embedded-browser-webview=1 --no-pre-read-main-dll --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1744,i,4470919672239226354,5874017996986344639,262144 --field-trial-handle=1820,i,12977186460147681698,16494101312806807780,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 46ms User: 78ms IOCount: Read: 241 Write: 187 Other: 464 PID: 9120 Name: msedgewebview2.exe PPID: 8532 Threads: 26 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --user-data-dir="C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.17400.40.0 --embedded-browser-webview=1 --startup-read-main-dll --metrics-shmem-handle=2108,i,4411288353406426199,9277381696716082631,524288 --field-trial-handle=1820,i,12977186460147681698,16494101312806807780,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:11 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 62ms User: 93ms IOCount: Read: 267 Write: 141 Other: 992 PID: 6020 Name: msedgewebview2.exe PPID: 8532 Threads: 9 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --user-data-dir="C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.17400.40.0 --embedded-browser-webview=1 --startup-read-main-dll --metrics-shmem-handle=2480,i,17688163716450193309,16022667046015481166,524288 --field-trial-handle=1820,i,12977186460147681698,16494101312806807780,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:13 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 46ms User: 31ms IOCount: Read: 124 Write: 129 Other: 85 PID: 5644 Name: msedgewebview2.exe PPID: 8532 Threads: 15 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --type=renderer --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --user-data-dir="C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.17400.40.0 --embedded-browser-webview=1 --dma-cps-flags=0 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--expose-gc --ms-user-locale=" --time-ticks-at-unix-epoch=-1764675252577002 --launch-time-ticks=37371523 --ram-no-pressure-read-main-dll --metrics-shmem-handle=3476,i,8754561250975576430,5178862687036155696,2097152 --field-trial-handle=1820,i,12977186460147681698,16494101312806807780,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=3600 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a /prefetch:1 User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:49Z Kernel: 93ms User: 62ms IOCount: Read: 190 Write: 299 Other: 143 PID: 9520 Name: NisSrv.exe PPID: 860 Threads: 10 Path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\NisSrv.exe User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:51Z Kernel: 0ms User: 46ms IOCount: Read: 1 Write: 0 Other: 831 PID: 9564 Name: smartscreen.exe PPID: 1192 Threads: 10 Path: C:\Windows\System32\smartscreen.exe Cmdline: C:\Windows\System32\smartscreen.exe -Embedding User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:51Z Kernel: 15ms User: 0ms IOCount: Read: 1 Write: 0 Other: 136 PID: 9608 Name: SecurityHealthSystray.exe PPID: 6796 Threads: 7 Path: C:\Windows\System32\SecurityHealthSystray.exe Cmdline: "C:\Windows\System32\SecurityHealthSystray.exe" User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:51Z Kernel: 15ms User: 15ms IOCount: Read: 1 Write: 0 Other: 109 PID: 9632 Name: SecurityHealthService.exe PPID: 860 Threads: 17 Path: C:\Windows\System32\SecurityHealthService.exe User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:51Z Kernel: 62ms User: 31ms IOCount: Read: 1 Write: 1 Other: 1528 PID: 9876 Name: msedgewebview2.exe PPID: 8532 Threads: 19 Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe Cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe" --type=renderer --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --user-data-dir="C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.17400.40.0 --embedded-browser-webview=1 --dma-cps-flags=0 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--expose-gc --ms-user-locale=" --time-ticks-at-unix-epoch=-1764675252577002 --launch-time-ticks=39591749 --skip-read-main-dll --metrics-shmem-handle=3648,i,795789956036182590,10596788469365432024,2097152 --field-trial-handle=1820,i,12977186460147681698,16494101312806807780,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,SafetyHub,SegmentationPlatform,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeCoupons,msAutofillEdgeCouponsAutoApply,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --mojo-platform-channel-handle=3708 /pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a /prefetch:1 User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:52Z Kernel: 125ms User: 296ms IOCount: Read: 978 Write: 1198 Other: 134 PID: 10060 Name: WmiPrvSE.exe PPID: 1192 Threads: 10 Path: C:\Windows\System32\wbem\WmiPrvSE.exe Cmdline: C:\WINDOWS\system32\wbem\wmiprvse.exe User: NT AUTHORITY\NETWORK SERVICE Session: 0 Times: Start: 2025-12-02T11:34:52Z Kernel: 15ms User: 0ms IOCount: Read: 1 Write: 0 Other: 113 PID: 10440 Name: OneDrive.exe PPID: 6796 Threads: 39 Path: C:\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe Cmdline: "C:\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:34:54Z Kernel: 781ms User: 734ms IOCount: Read: 194 Write: 2389 Other: 13405 PID: 10720 Name: svchost.exe PPID: 860 Threads: 24 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BITS User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:55Z Kernel: 15ms User: 62ms IOCount: Read: 84 Write: 10 Other: 779 PID: 10768 Name: svchost.exe PPID: 860 Threads: 14 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:34:55Z Kernel: 15ms User: 0ms IOCount: Read: 1 Write: 0 Other: 175 PID: 10812 Name: SearchIndexer.exe PPID: 860 Threads: 13 Path: C:\Windows\System32\SearchIndexer.exe Cmdline: C:\WINDOWS\system32\SearchIndexer.exe /Embedding User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:34:55Z Kernel: 234ms User: 234ms IOCount: Read: 447 Write: 77 Other: 8878 PID: 3316 Name: dllhost.exe PPID: 1192 Threads: 9 Path: C:\Windows\System32\dllhost.exe Cmdline: "C:\WINDOWS\system32\DllHost.exe" /Processid:{CA6CC9F1-867A-481E-951E-A28C5E4F01EA} User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:35:04Z Kernel: 15ms User: 15ms IOCount: Read: 1 Write: 0 Other: 172 PID: 9288 Name: SearchProtocolHost.exe PPID: 10812 Threads: 10 Path: C:\Windows\System32\SearchProtocolHost.exe Cmdline: "C:\WINDOWS\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:35:07Z Kernel: 31ms User: 0ms IOCount: Read: 3 Write: 0 Other: 471 PID: 10172 Name: MpCmdRun.exe PPID: 1808 Threads: 6 Path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe Cmdline: "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe" -IdleTask -TaskName WdVerification User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:35:10Z Kernel: 15ms User: 0ms IOCount: Read: 0 Write: 1 Other: 71 PID: 9268 Name: MpCmdRun.exe PPID: 1808 Threads: 5 Path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe Cmdline: "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe" -IdleTask -TaskName WdCleanup User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:35:10Z Kernel: 0ms User: 15ms IOCount: Read: 0 Write: 1 Other: 70 PID: 1316 Name: conhost.exe PPID: 10172 Threads: 5 Path: C:\Windows\System32\conhost.exe Cmdline: \??\C:\WINDOWS\system32\conhost.exe 0x4 User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:35:10Z Kernel: 0ms User: 31ms IOCount: Read: 11 Write: 0 Other: 56 PID: 1044 Name: conhost.exe PPID: 9268 Threads: 5 Path: C:\Windows\System32\conhost.exe Cmdline: \??\C:\WINDOWS\system32\conhost.exe 0x4 User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:35:10Z Kernel: 0ms User: 0ms IOCount: Read: 11 Write: 0 Other: 55 PID: 9224 Name: ShellExperienceHost.exe PPID: 1192 Threads: 28 Path: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Cmdline: "C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:35:10Z Kernel: 31ms User: 140ms IOCount: Read: 4 Write: 0 Other: 974 PID: 10232 Name: RuntimeBroker.exe PPID: 1192 Threads: 14 Path: C:\Windows\System32\RuntimeBroker.exe Cmdline: C:\Windows\System32\RuntimeBroker.exe -Embedding User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:35:11Z Kernel: 46ms User: 31ms IOCount: Read: 1 Write: 0 Other: 388 PID: 10344 Name: audiodg.exe PPID: 3436 Threads: 13 Path: C:\Windows\System32\audiodg.exe Cmdline: C:\WINDOWS\system32\AUDIODG.EXE 0x00000000000004C4 User: NT AUTHORITY\LOCAL SERVICE Session: 0 Times: Start: 2025-12-02T11:35:11Z Kernel: 46ms User: 62ms IOCount: Read: 5 Write: 93 Other: 208 PID: 7296 Name: ctfmon.exe PPID: 3540 Threads: 14 Path: C:\Windows\System32\ctfmon.exe Cmdline: /QuitInfo:0000000000000260;0000000000000214; User: NT AUTHORITY\SYSTEM Session: 2 Times: Start: 2025-12-02T11:35:11Z Kernel: 78ms User: 62ms IOCount: Read: 1 Write: 0 Other: 158 PID: 5696 Name: VSTriage.exe PPID: 6796 Threads: 4 Path: C:\Users\GT\Desktop\VSTriage.exe Cmdline: "C:\Users\GT\Desktop\VSTriage.exe" User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:35:13Z Kernel: 31ms User: 31ms IOCount: Read: 0 Write: 7 Other: 124 PID: 5704 Name: svchost.exe PPID: 860 Threads: 14 Path: C:\Windows\System32\svchost.exe Cmdline: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc User: NT AUTHORITY\SYSTEM Session: 0 Times: Start: 2025-12-02T11:35:13Z Kernel: 62ms User: 62ms IOCount: Read: 7 Write: 1 Other: 976 PID: 11016 Name: conhost.exe PPID: 5696 Threads: 7 Path: C:\Windows\System32\conhost.exe Cmdline: \??\C:\WINDOWS\system32\conhost.exe 0x4 User: DESKTOP-ORDL0UQ\GT Session: 2 Times: Start: 2025-12-02T11:35:13Z Kernel: 15ms User: 31ms ====Loaded Modules==== 2025-12-02T11:35:13Z 0: (ERROR 87) 4: (ERROR 5) 172: (ERROR 5) 716: (ERROR 5) 892: (ERROR 5) 964: (ERROR 5) 972: (ERROR 5) 804: winlogon.exe C:\WINDOWS\system32\winlogon.exe \Device\HarddiskVolume3\Windows\System32\winlogon.exe (0x00007FF78C060000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\utcapi.dll \Device\HarddiskVolume3\Windows\System32\utcapi.dll (0x00007FFFAA830000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\profext.dll \Device\HarddiskVolume3\Windows\System32\profext.dll (0x00007FFFA8140000) C:\WINDOWS\system32\Bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\system32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\uxinit.dll \Device\HarddiskVolume3\Windows\System32\UXInit.dll (0x00007FFFA6DC0000) C:\WINDOWS\system32\UxTheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\system32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\dwminit.dll \Device\HarddiskVolume3\Windows\System32\dwminit.dll (0x00007FFFA6BE0000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\WINDOWS\system32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) 860: (ERROR 5) 1052: (ERROR 5) 1192: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\umpnpmgr.dll \Device\HarddiskVolume3\Windows\System32\umpnpmgr.dll (0x00007FFFA7FF0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\umpo.dll \Device\HarddiskVolume3\Windows\System32\umpo.dll (0x00007FFFA7FB0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\SYSTEM32\umpoext.dll \Device\HarddiskVolume3\Windows\System32\umpoext.dll (0x00007FFFA7F30000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) c:\windows\system32\umpodev.dll \Device\HarddiskVolume3\Windows\System32\umpodev.dll (0x00007FFFA7F20000) C:\WINDOWS\system32\umpo-overrides.dll \Device\HarddiskVolume3\Windows\System32\umpo-overrides.dll (0x00007FFFA7F00000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\SYSTEM32\HID.DLL \Device\HarddiskVolume3\Windows\System32\hid.dll (0x00007FFFA7EE0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) c:\windows\system32\rpcss.dll \Device\HarddiskVolume3\Windows\System32\rpcss.dll (0x00007FFFA7500000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\psmsrv.dll \Device\HarddiskVolume3\Windows\System32\psmsrv.dll (0x00007FFFA7450000) C:\WINDOWS\SYSTEM32\bisrv.dll \Device\HarddiskVolume3\Windows\System32\bisrv.dll (0x00007FFFA7350000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) c:\windows\system32\EventAggregation.dll \Device\HarddiskVolume3\Windows\System32\EventAggregation.dll (0x00007FFFAA5F0000) c:\windows\system32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll (0x00007FFFA7330000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\psmserviceexthost.dll \Device\HarddiskVolume3\Windows\System32\PsmServiceExtHost.dll (0x00007FFFA70F0000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) c:\windows\system32\wer.dll \Device\HarddiskVolume3\Windows\System32\wer.dll (0x00007FFFAA1F0000) C:\WINDOWS\SYSTEM32\embeddedmodesvcapi.dll \Device\HarddiskVolume3\Windows\System32\embeddedmodesvcapi.dll (0x00007FFFA70C0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\WINDOWS\SYSTEM32\resourcepolicyserver.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyServer.dll (0x00007FFFA6E00000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) c:\windows\system32\systemeventsbrokerserver.dll \Device\HarddiskVolume3\Windows\System32\SystemEventsBrokerServer.dll (0x00007FFFA6C90000) c:\windows\system32\BrokerLib.dll \Device\HarddiskVolume3\Windows\System32\BrokerLib.dll (0x00007FFFA6C50000) c:\windows\system32\DAB.dll \Device\HarddiskVolume3\Windows\System32\dab.dll (0x00007FFFA6C20000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\bi.dll \Device\HarddiskVolume3\Windows\System32\bi.dll (0x00007FFFA3620000) C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll (0x00007FFF90A10000) C:\Windows\System32\ACPBackgroundManagerPolicy.dll \Device\HarddiskVolume3\Windows\System32\ACPBackgroundManagerPolicy.dll (0x00007FFF909C0000) C:\WINDOWS\System32\BackgroundMediaPolicy.dll \Device\HarddiskVolume3\Windows\System32\BackgroundMediaPolicy.dll (0x00007FFF921D0000) C:\WINDOWS\system32\SmartCardBackgroundPolicy.dll \Device\HarddiskVolume3\Windows\System32\SmartCardBackgroundPolicy.dll (0x00007FFF91A90000) C:\WINDOWS\system32\SebBackgroundManagerPolicy.dll \Device\HarddiskVolume3\Windows\System32\SebBackgroundManagerPolicy.dll (0x00007FFF90800000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\Windows\System32\execmodelclient.dll \Device\HarddiskVolume3\Windows\System32\ExecModelClient.dll (0x00007FFF90E60000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\licensemanagerapi.dll \Device\HarddiskVolume3\Windows\System32\LicenseManagerApi.dll (0x00007FFF90BC0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\daxexec.dll \Device\HarddiskVolume3\Windows\System32\daxexec.dll (0x00007FFF900A0000) c:\windows\system32\container.dll \Device\HarddiskVolume3\Windows\System32\container.dll (0x00007FFF90040000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\AppXAllUserStore.dll \Device\HarddiskVolume3\Windows\System32\AppxAllUserStore.dll (0x00007FFFA9BB0000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\BINDFLTAPI.dll \Device\HarddiskVolume3\Windows\System32\bindfltapi.dll (0x00007FFF88100000) C:\WINDOWS\SYSTEM32\FLTLIB.DLL \Device\HarddiskVolume3\Windows\System32\fltLib.dll (0x00007FFFA8A70000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) c:\windows\system32\NduProv.dll \Device\HarddiskVolume3\Windows\System32\nduprov.dll (0x00007FFF9AE20000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\Windows\System32\OnDemandBrokerClient.dll \Device\HarddiskVolume3\Windows\System32\OnDemandBrokerClient.dll (0x00007FFF8E4C0000) 1224: fontdrvhost.exe C:\WINDOWS\system32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32\fontdrvhost.exe (0x00007FF6837A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) 1232: fontdrvhost.exe C:\WINDOWS\system32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32\fontdrvhost.exe (0x00007FF6837A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) 1328: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\rpcepmap.dll \Device\HarddiskVolume3\Windows\System32\RpcEpMap.dll (0x00007FFFA74D0000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\system32\RpcRtRemote.dll \Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll (0x00007FFFA74A0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) c:\windows\system32\rpcss.dll \Device\HarddiskVolume3\Windows\System32\rpcss.dll (0x00007FFFA7500000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\FirewallAPI.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\system32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\system32\wshhyperv.dll \Device\HarddiskVolume3\Windows\System32\wshhyperv.dll (0x00007FFFA70E0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\fwpuclnt.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL (0x00007FFFA0590000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\daxexec.dll \Device\HarddiskVolume3\Windows\System32\daxexec.dll (0x00007FFF900A0000) c:\windows\system32\container.dll \Device\HarddiskVolume3\Windows\System32\container.dll (0x00007FFF90040000) c:\windows\system32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) 1372: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\lsm.dll \Device\HarddiskVolume3\Windows\System32\lsm.dll (0x00007FFFA7200000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\system32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\system32\wshhyperv.dll \Device\HarddiskVolume3\Windows\System32\wshhyperv.dll (0x00007FFFA70E0000) c:\windows\system32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) c:\windows\system32\SYSNTFY.dll \Device\HarddiskVolume3\Windows\System32\sysntfy.dll (0x00007FFFA7010000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\Userenv.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\system32\lsmproxy.dll \Device\HarddiskVolume3\Windows\System32\lsmproxy.dll (0x00007FFFA4450000) C:\WINDOWS\SYSTEM32\utcapi.dll \Device\HarddiskVolume3\Windows\System32\utcapi.dll (0x00007FFFAA830000) C:\WINDOWS\system32\AppXAllUserStore.dll \Device\HarddiskVolume3\Windows\System32\AppxAllUserStore.dll (0x00007FFFA9BB0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) c:\windows\system32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) c:\windows\system32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) c:\windows\system32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) 1464: LogonUI.exe C:\WINDOWS\system32\LogonUI.exe \Device\HarddiskVolume3\Windows\System32\LogonUI.exe (0x00007FF662DC0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\logoncontroller.dll \Device\HarddiskVolume3\Windows\System32\LogonController.dll (0x00007FFFA6A20000) C:\WINDOWS\System32\CredProvCommonCore.DLL \Device\HarddiskVolume3\Windows\System32\CredProvCommonCore.dll (0x00007FFFA6A00000) C:\WINDOWS\System32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\SLC.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\system32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\System32\shacct.dll \Device\HarddiskVolume3\Windows\System32\shacct.dll (0x00007FFFA4B80000) C:\WINDOWS\System32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\audioses.dll \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\WINDOWS\System32\MMDevApi.dll \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll (0x00007FFFA0200000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\AVRT.dll \Device\HarddiskVolume3\Windows\System32\avrt.dll (0x00007FFFA3350000) C:\WINDOWS\system32\Windows.UI.Logon.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Logon.dll (0x00007FFF99DD0000) C:\WINDOWS\system32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\system32\wincorlib.DLL \Device\HarddiskVolume3\Windows\System32\wincorlib.dll (0x00007FFF9AAE0000) C:\WINDOWS\System32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\Windows\System32\Windows.UI.XamlHost.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.XamlHost.dll (0x00007FFF9ABB0000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\languageoverlayutil.dll \Device\HarddiskVolume3\Windows\System32\LanguageOverlayUtil.dll (0x00007FFF9A980000) C:\Windows\System32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\Windows\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\system32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\WINDOWS\SYSTEM32\inputhost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\WINDOWS\SYSTEM32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\WINDOWS\system32\FontGlyphAnimator.dll \Device\HarddiskVolume3\Windows\System32\FontGlyphAnimator.dll (0x00007FFF9FFD0000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\CredProvDataModel.dll \Device\HarddiskVolume3\Windows\System32\CredProvDataModel.dll (0x00007FFF9F760000) C:\Windows\System32\NetworkIcon.dll \Device\HarddiskVolume3\Windows\System32\NetworkIcon.dll (0x00007FFF9FC40000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\Windows\System32\NetworkUXBroker.dll \Device\HarddiskVolume3\Windows\System32\NetworkUXBroker.dll (0x00007FFF9F6C0000) C:\Windows\System32\windowscodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\DAMediaManager.dll \Device\HarddiskVolume3\Windows\System32\DAMediaManager.dll (0x00007FFF9FFA0000) C:\Windows\System32\EthernetMediaManager.dll \Device\HarddiskVolume3\Windows\System32\EthernetMediaManager.dll (0x00007FFF9F520000) C:\WINDOWS\System32\credprovhost.dll \Device\HarddiskVolume3\Windows\System32\credprovhost.dll (0x00007FFF9F330000) C:\WINDOWS\System32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\Windows\System32\NcaApi.dll \Device\HarddiskVolume3\Windows\System32\NcaApi.dll (0x00007FFF9FF90000) C:\Windows\System32\dot3api.dll \Device\HarddiskVolume3\Windows\System32\dot3api.dll (0x00007FFF9F690000) C:\Windows\System32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\WINDOWS\system32\credprovs.dll \Device\HarddiskVolume3\Windows\System32\credprovs.dll (0x00007FFF9F2C0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\system32\credprovslegacy.dll \Device\HarddiskVolume3\Windows\System32\credprovslegacy.dll (0x00007FFF9F280000) C:\Windows\System32\Windows.Devices.Sensors.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Sensors.dll (0x00007FFF97FA0000) C:\Windows\System32\FaceCredentialProvider.dll \Device\HarddiskVolume3\Windows\System32\facecredentialprovider.dll (0x00007FFF97EF0000) C:\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\Windows\System32\Windows.Media.dll \Device\HarddiskVolume3\Windows\System32\Windows.Media.dll (0x00007FFF97860000) C:\Windows\System32\MFPlat.DLL \Device\HarddiskVolume3\Windows\System32\mfplat.dll (0x00007FFF97630000) C:\Windows\System32\RTWorkQ.DLL \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll (0x00007FFF975E0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\system32\SmartcardCredentialProvider.dll \Device\HarddiskVolume3\Windows\System32\SmartcardCredentialProvider.dll (0x00007FFF97510000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\System32\BioCredProv.dll \Device\HarddiskVolume3\Windows\System32\BioCredProv.dll (0x00007FFF97490000) C:\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll (0x00007FFF9F160000) C:\Windows\System32\cxcredprov.dll \Device\HarddiskVolume3\Windows\System32\cxcredprov.dll (0x00007FFF97450000) C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll \Device\HarddiskVolume3\Windows\System32\PhotoMetadataHandler.dll (0x00007FFF973A0000) C:\Windows\System32\ngccredprov.dll \Device\HarddiskVolume3\Windows\System32\ngccredprov.dll (0x00007FFF972D0000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\WINDOWS\system32\rdpcredentialprovider.dll \Device\HarddiskVolume3\Windows\System32\rdpcredentialprovider.dll (0x00007FFF9F140000) C:\WINDOWS\system32\wlidcredprov.dll \Device\HarddiskVolume3\Windows\System32\wlidcredprov.dll (0x00007FFF97270000) C:\WINDOWS\system32\rasplap.dll \Device\HarddiskVolume3\Windows\System32\rasplap.dll (0x00007FFF9AC60000) C:\WINDOWS\system32\rtutils.dll \Device\HarddiskVolume3\Windows\System32\rtutils.dll (0x00007FFF9AAC0000) C:\WINDOWS\system32\CredProv2faHelper.dll \Device\HarddiskVolume3\Windows\System32\CredProv2faHelper.dll (0x00007FFF97240000) C:\WINDOWS\system32\CredProvHelper.dll \Device\HarddiskVolume3\Windows\System32\CredProvHelper.dll (0x00007FFF97210000) C:\WINDOWS\System32\IDStore.dll \Device\HarddiskVolume3\Windows\System32\IDStore.dll (0x00007FFF971E0000) C:\WINDOWS\System32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) C:\WINDOWS\system32\Wldp.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll (0x00007FFFA9960000) C:\WINDOWS\SYSTEM32\winbio.dll \Device\HarddiskVolume3\Windows\System32\winbio.dll (0x00007FFF97190000) C:\WINDOWS\system32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\Windows\System32\ngckeyenum.dll \Device\HarddiskVolume3\Windows\System32\ngckeyenum.dll (0x00007FFF97140000) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.BioFeedback.dll (0x00007FFF96F80000) 1472: dwm.exe C:\WINDOWS\system32\dwm.exe \Device\HarddiskVolume3\Windows\System32\dwm.exe (0x00007FF6BF270000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\system32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\dwmredir.dll \Device\HarddiskVolume3\Windows\System32\dwmredir.dll (0x00007FFFA69B0000) C:\WINDOWS\SYSTEM32\udwm.dll \Device\HarddiskVolume3\Windows\System32\uDWM.dll (0x00007FFFA6860000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\system32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\system32\dwmcore.dll \Device\HarddiskVolume3\Windows\System32\dwmcore.dll (0x00007FFFA62E0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\system32\DWrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\system32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\system32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\system32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\system32\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\WINDOWS\system32\D3DCOMPILER_47.dll \Device\HarddiskVolume3\Windows\System32\D3DCompiler_47.dll (0x00007FFFA4F70000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\system32\avrt.dll \Device\HarddiskVolume3\Windows\System32\avrt.dll (0x00007FFFA3350000) C:\WINDOWS\SYSTEM32\ism.dll \Device\HarddiskVolume3\Windows\System32\ISM.dll (0x00007FFFA30B0000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\system32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\dwmghost.dll \Device\HarddiskVolume3\Windows\System32\dwmghost.dll (0x00007FFFA2DA0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\windowmanagementapi.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\system32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\imagehlp.dll \Device\HarddiskVolume3\Windows\System32\imagehlp.dll (0x00007FFFAC000000) C:\Windows\System32\DispBroker.dll \Device\HarddiskVolume3\Windows\System32\DispBroker.dll (0x00007FFFA23C0000) C:\Windows\System32\DispBroker.Desktop.dll \Device\HarddiskVolume3\Windows\System32\DispBroker.Desktop.dll (0x00007FFFA2280000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) c:\windows\system32\gameinput.dll \Device\HarddiskVolume3\Windows\System32\GameInput.dll (0x00007FFFA1D90000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\Windows.Gaming.Input.dll \Device\HarddiskVolume3\Windows\System32\Windows.Gaming.Input.dll (0x00007FFFA1AB0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\UIAnimation.dll \Device\HarddiskVolume3\Windows\System32\UIAnimation.dll (0x00007FFFA1740000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\mscms.dll \Device\HarddiskVolume3\Windows\System32\mscms.dll (0x00007FFFA0D70000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\WINDOWS\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) 1540: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\gpsvc.dll \Device\HarddiskVolume3\Windows\System32\gpsvc.dll (0x00007FFFA4910000) c:\windows\system32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\SYSNTFY.dll \Device\HarddiskVolume3\Windows\System32\sysntfy.dll (0x00007FFFA7010000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\system32\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll (0x00007FFF94B20000) C:\WINDOWS\SYSTEM32\wbemcomn.dll \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll (0x00007FFF9C260000) C:\WINDOWS\system32\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll (0x00007FFF95B60000) C:\WINDOWS\system32\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll (0x00007FFF94840000) C:\WINDOWS\SYSTEM32\amsi.dll \Device\HarddiskVolume3\Windows\System32\amsi.dll (0x00007FFFA0890000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOAV.dll (0x00007FFFA0670000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) 1556: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\cryptsvc.dll \Device\HarddiskVolume3\Windows\System32\cryptsvc.dll (0x00007FFFA4750000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\crypttpmeksvc.dll \Device\HarddiskVolume3\Windows\System32\crypttpmeksvc.dll (0x00007FFFA4680000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\cryptcatsvc.dll \Device\HarddiskVolume3\Windows\System32\cryptcatsvc.dll (0x00007FFFA4470000) C:\Windows\System32\webauthn.dll \Device\HarddiskVolume3\Windows\System32\webauthn.dll (0x00007FFFA4280000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\vssapi.dll \Device\HarddiskVolume3\Windows\System32\vssapi.dll (0x00007FFFA1BA0000) C:\WINDOWS\system32\VssTrace.DLL \Device\HarddiskVolume3\Windows\System32\vsstrace.dll (0x00007FFFA1A90000) C:\WINDOWS\system32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) C:\WINDOWS\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\ES.DLL \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\system32\ESENT.dll \Device\HarddiskVolume3\Windows\System32\esent.dll (0x00007FFF9B3C0000) C:\WINDOWS\system32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) C:\WINDOWS\system32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\system32\PCPKsp.dll \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll (0x00007FFF9F3C0000) C:\WINDOWS\system32\tbs.dll \Device\HarddiskVolume3\Windows\System32\tbs.dll (0x00007FFFA3940000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll (0x00007FFF9DED0000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\WINDOWS\System32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) 1564: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\termsrv.dll \Device\HarddiskVolume3\Windows\System32\termsrv.dll (0x00007FFFA4780000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\lsmproxy.dll \Device\HarddiskVolume3\Windows\System32\lsmproxy.dll (0x00007FFFA4450000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\REGAPI.dll \Device\HarddiskVolume3\Windows\System32\regapi.dll (0x00007FFFA4160000) C:\WINDOWS\system32\rdpcorets.dll \Device\HarddiskVolume3\Windows\System32\rdpcorets.dll (0x00007FFFA3EA0000) C:\WINDOWS\system32\tlscsp.dll \Device\HarddiskVolume3\Windows\System32\tlscsp.dll (0x00007FFFA3E20000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\RDPBASE.dll \Device\HarddiskVolume3\Windows\System32\rdpbase.dll (0x00007FFFA3C40000) C:\WINDOWS\system32\RDPSERVERBASE.dll \Device\HarddiskVolume3\Windows\System32\rdpserverbase.dll (0x00007FFFA3960000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\umb.dll \Device\HarddiskVolume3\Windows\System32\umb.dll (0x00007FFFA38C0000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\System32\SETUPAPI.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\System32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\System32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\system32\MF.dll \Device\HarddiskVolume3\Windows\System32\mf.dll (0x00007FFFA8C00000) C:\WINDOWS\System32\MFCORE.DLL \Device\HarddiskVolume3\Windows\System32\mfcore.dll (0x00007FFF95070000) C:\WINDOWS\system32\MFPlat.dll \Device\HarddiskVolume3\Windows\System32\mfplat.dll (0x00007FFF97630000) C:\WINDOWS\System32\RTWorkQ.DLL \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll (0x00007FFF975E0000) C:\Windows\System32\mfh264enc.dll \Device\HarddiskVolume3\Windows\System32\mfh264enc.dll (0x00007FFFA8850000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) 1576: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\printdeviceconfigurationservice.dll \Device\HarddiskVolume3\Windows\System32\PrintDeviceConfigurationService.dll (0x00007FFFA48D0000) 1600: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\bdesvc.dll \Device\HarddiskVolume3\Windows\System32\bdesvc.dll (0x00007FFFA46A0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\bcd.dll \Device\HarddiskVolume3\Windows\System32\bcd.dll (0x00007FFFA9920000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\wevtapi.dll (0x00007FFFA4620000) c:\windows\system32\FVEAPI.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll (0x00007FFFA44D0000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) c:\windows\system32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) c:\windows\system32\FVECERTS.dll \Device\HarddiskVolume3\Windows\System32\fvecerts.dll (0x00007FFFA44B0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) c:\windows\system32\tbs.dll \Device\HarddiskVolume3\Windows\System32\tbs.dll (0x00007FFFA3940000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\IDStore.dll \Device\HarddiskVolume3\Windows\System32\IDStore.dll (0x00007FFF971E0000) C:\WINDOWS\System32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\wlidprov.dll \Device\HarddiskVolume3\Windows\System32\wlidprov.dll (0x00007FFF94020000) 1808: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\schedsvc.dll \Device\HarddiskVolume3\Windows\System32\schedsvc.dll (0x00007FFFA4070000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\UBPM.dll \Device\HarddiskVolume3\Windows\System32\ubpm.dll (0x00007FFFA3E40000) c:\windows\system32\EventAggregation.dll \Device\HarddiskVolume3\Windows\System32\EventAggregation.dll (0x00007FFFAA5F0000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) c:\windows\system32\AUTHZ.dll \Device\HarddiskVolume3\Windows\System32\authz.dll (0x00007FFFA83A0000) c:\windows\system32\POWRPROF.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) c:\windows\system32\WMICLNT.dll \Device\HarddiskVolume3\Windows\System32\wmiclnt.dll (0x00007FFFA38E0000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\taskcomp.dll \Device\HarddiskVolume3\Windows\System32\taskcomp.dll (0x00007FFFA3850000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) c:\windows\system32\CSystemEventsBrokerClient.dll \Device\HarddiskVolume3\Windows\System32\CSystemEventsBrokerClient.dll (0x00007FFFA36D0000) c:\windows\system32\TimeBrokerClient.dll \Device\HarddiskVolume3\Windows\System32\TimeBrokerClient.dll (0x00007FFFA3640000) C:\WINDOWS\SYSTEM32\WPTaskScheduler.dll \Device\HarddiskVolume3\Windows\System32\WPTaskScheduler.dll (0x00007FFFA3390000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\DABAPI.dll \Device\HarddiskVolume3\Windows\System32\dabapi.dll (0x00007FFFA6C10000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\wevtapi.dll (0x00007FFFA4620000) c:\windows\system32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) c:\windows\system32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) 1840: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\ncbservice.dll \Device\HarddiskVolume3\Windows\System32\ncbservice.dll (0x00007FFFA3660000) c:\windows\system32\BrokerLib.dll \Device\HarddiskVolume3\Windows\System32\BrokerLib.dll (0x00007FFFA6C50000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\httpprxc.dll \Device\HarddiskVolume3\Windows\System32\httpprxc.dll (0x00007FFFA3630000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\bi.dll \Device\HarddiskVolume3\Windows\System32\bi.dll (0x00007FFFA3620000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\SYSTEM32\windows.devices.radios.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Radios.dll (0x00007FFFA0070000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\BthRadioMedia.dll \Device\HarddiskVolume3\Windows\System32\BthRadioMedia.dll (0x00007FFF9FF00000) C:\WINDOWS\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\bluetoothapis.dll \Device\HarddiskVolume3\Windows\System32\BluetoothApis.dll (0x00007FFF9FEB0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\System32\Bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) 1852: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\profsvc.dll \Device\HarddiskVolume3\Windows\System32\profsvc.dll (0x00007FFFA3BA0000) c:\windows\system32\SYSNTFY.dll \Device\HarddiskVolume3\Windows\System32\sysntfy.dll (0x00007FFFA7010000) C:\WINDOWS\SYSTEM32\profsvcext.dll \Device\HarddiskVolume3\Windows\System32\profsvcext.dll (0x00007FFFA3900000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\logoncli.dll \Device\HarddiskVolume3\Windows\System32\logoncli.dll (0x00007FFFA9360000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\Windows\System32\Windows.CloudStore.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.dll (0x00007FFF940D0000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\IDStore.dll \Device\HarddiskVolume3\Windows\System32\IDStore.dll (0x00007FFF971E0000) C:\WINDOWS\System32\shacctprofile.dll \Device\HarddiskVolume3\Windows\System32\shacctprofile.dll (0x00007FFFA9C30000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) 1940: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\usermgr.dll \Device\HarddiskVolume3\Windows\System32\usermgr.dll (0x00007FFFA36E0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) c:\windows\system32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) c:\windows\system32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) 2000: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\coremessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) 2008: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\timebrokerserver.dll \Device\HarddiskVolume3\Windows\System32\TimeBrokerServer.dll (0x00007FFFA33F0000) c:\windows\system32\BrokerLib.dll \Device\HarddiskVolume3\Windows\System32\BrokerLib.dll (0x00007FFFA6C50000) c:\windows\system32\POWRPROF.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\bi.dll \Device\HarddiskVolume3\Windows\System32\bi.dll (0x00007FFFA3620000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) 2016: (ERROR 5) 1368: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\umrdp.dll \Device\HarddiskVolume3\Windows\System32\umrdp.dll (0x00007FFFA2D30000) C:\WINDOWS\System32\setupapi.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\umb.dll \Device\HarddiskVolume3\Windows\System32\umb.dll (0x00007FFFA38C0000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\WINSPOOL.DRV \Device\HarddiskVolume3\Windows\System32\winspool.drv (0x00007FFFA9AF0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\printui.dll \Device\HarddiskVolume3\Windows\System32\printui.dll (0x00007FFF922E0000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\puiapi.dll \Device\HarddiskVolume3\Windows\System32\puiapi.dll (0x00007FFF92290000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\Comctl32.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.dll (0x00007FFF91BF0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) 1716: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\nsisvc.dll \Device\HarddiskVolume3\Windows\System32\nsisvc.dll (0x00007FFFA2510000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) 2080: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvc.dll \Device\HarddiskVolume3\Windows\System32\icsvc.dll (0x00007FFFA2550000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) 2088: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvc.dll \Device\HarddiskVolume3\Windows\System32\icsvc.dll (0x00007FFFA2550000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) c:\windows\system32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\WINDOWS\SYSTEM32\netjoin.dll \Device\HarddiskVolume3\Windows\System32\netjoin.dll (0x00007FFFA2380000) C:\WINDOWS\SYSTEM32\JoinUtil.dll \Device\HarddiskVolume3\Windows\System32\joinutil.dll (0x00007FFFA98D0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll \Device\HarddiskVolume3\Windows\System32\VmApplicationHealthMonitorProxy.dll (0x00007FFFA2230000) 2096: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvc.dll \Device\HarddiskVolume3\Windows\System32\icsvc.dll (0x00007FFFA2550000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) 2132: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvcext.dll \Device\HarddiskVolume3\Windows\System32\icsvcext.dll (0x00007FFFA24E0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\system32\vmrdvcore.dll \Device\HarddiskVolume3\Windows\System32\vmrdvcore.dll (0x00007FFFA2080000) C:\WINDOWS\system32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) 2156: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvc.dll \Device\HarddiskVolume3\Windows\System32\icsvc.dll (0x00007FFFA2550000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) 2228: (ERROR 5) 2240: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvcvss.dll \Device\HarddiskVolume3\Windows\System32\icsvcvss.dll (0x00007FFFA2460000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\vss_ps.dll \Device\HarddiskVolume3\Windows\System32\vss_ps.dll (0x00007FFFA0570000) 2248: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\icsvc.dll \Device\HarddiskVolume3\Windows\System32\icsvc.dll (0x00007FFFA2550000) c:\windows\system32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) 2316: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wpdbusenum.dll \Device\HarddiskVolume3\Windows\System32\wpdbusenum.dll (0x00007FFFA2020000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\PortableDeviceApi.dll \Device\HarddiskVolume3\Windows\System32\PortableDeviceApi.dll (0x00007FFFA2180000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\SETUPAPI.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\System32\cfgmgr32.DLL \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\Windows\System32\portabledeviceconnectapi.dll \Device\HarddiskVolume3\Windows\System32\PortableDeviceConnectApi.dll (0x00007FFFA2060000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) 2444: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\certprop.dll \Device\HarddiskVolume3\Windows\System32\certprop.dll (0x00007FFFA2240000) c:\windows\system32\WinSCard.dll \Device\HarddiskVolume3\Windows\System32\WinSCard.dll (0x00007FFFA2100000) C:\WINDOWS\system32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) c:\windows\system32\cryptngc.dll \Device\HarddiskVolume3\Windows\System32\cryptngc.dll (0x00007FFF92440000) c:\windows\system32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) c:\windows\system32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\scksp.dll \Device\HarddiskVolume3\Windows\System32\scksp.dll (0x00007FFF92240000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\credui.dll \Device\HarddiskVolume3\Windows\System32\credui.dll (0x00007FFF92220000) C:\WINDOWS\system32\ncryptprov.dll \Device\HarddiskVolume3\Windows\System32\ncryptprov.dll (0x00007FFF95FE0000) C:\WINDOWS\System32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\gdiplus.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\GdiPlus.dll (0x00007FFF8DE50000) C:\WINDOWS\system32\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) 2480: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\netprofmsvc.dll \Device\HarddiskVolume3\Windows\System32\netprofmsvc.dll (0x00007FFFA1E00000) c:\windows\system32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) c:\windows\system32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\ncsi.dll \Device\HarddiskVolume3\Windows\System32\ncsi.dll (0x00007FFFA1790000) c:\windows\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\system32\msv1_0.DLL \Device\HarddiskVolume3\Windows\System32\msv1_0.dll (0x00007FFFA9510000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\NtlmShared.dll \Device\HarddiskVolume3\Windows\System32\NtlmShared.dll (0x00007FFFA94F0000) C:\WINDOWS\system32\WlanApi.dll \Device\HarddiskVolume3\Windows\System32\wlanapi.dll (0x00007FFFA0C00000) C:\WINDOWS\System32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\WINDOWS\SYSTEM32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\wevtapi.dll (0x00007FFFA4620000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) c:\windows\system32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\WINDOWS\SYSTEM32\netjoin.dll \Device\HarddiskVolume3\Windows\System32\netjoin.dll (0x00007FFFA2380000) C:\WINDOWS\SYSTEM32\JoinUtil.dll \Device\HarddiskVolume3\Windows\System32\joinutil.dll (0x00007FFFA98D0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) c:\windows\system32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\System32\ssdpapi.dll \Device\HarddiskVolume3\Windows\System32\ssdpapi.dll (0x00007FFFA01E0000) C:\WINDOWS\SYSTEM32\computenetwork.dll \Device\HarddiskVolume3\Windows\System32\computenetwork.dll (0x00007FFFA0180000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) 2572: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\dispbroker.desktop.dll \Device\HarddiskVolume3\Windows\System32\DispBroker.Desktop.dll (0x00007FFFA2280000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) 2676: vssvc.exe C:\WINDOWS\system32\vssvc.exe \Device\HarddiskVolume3\Windows\System32\VSSVC.exe (0x00007FF64DCC0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\system32\VSSAPI.DLL \Device\HarddiskVolume3\Windows\System32\vssapi.dll (0x00007FFFA1BA0000) C:\WINDOWS\system32\VssTrace.DLL \Device\HarddiskVolume3\Windows\System32\vsstrace.dll (0x00007FFFA1A90000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\ES.DLL \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\amsi.dll \Device\HarddiskVolume3\Windows\System32\amsi.dll (0x00007FFFA0890000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOAV.dll (0x00007FFFA0670000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\system32\vss_ps.dll \Device\HarddiskVolume3\Windows\System32\vss_ps.dll (0x00007FFFA0570000) C:\WINDOWS\system32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) C:\WINDOWS\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\system32\catsrvut.dll \Device\HarddiskVolume3\Windows\System32\catsrvut.dll (0x00007FFFA00F0000) C:\WINDOWS\system32\MfcSubs.dll \Device\HarddiskVolume3\Windows\System32\mfcsubs.dll (0x00007FFFA00D0000) 2764: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wkssvc.dll \Device\HarddiskVolume3\Windows\System32\wkssvc.dll (0x00007FFFA0B90000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) c:\windows\system32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\netjoin.dll \Device\HarddiskVolume3\Windows\System32\netjoin.dll (0x00007FFFA2380000) C:\WINDOWS\SYSTEM32\JOINUTIL.DLL \Device\HarddiskVolume3\Windows\System32\joinutil.dll (0x00007FFFA98D0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) 2776: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wevtsvc.dll \Device\HarddiskVolume3\Windows\System32\wevtsvc.dll (0x00007FFFA0E40000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) 2784: (ERROR 5) 2844: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\es.dll \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) 2856: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\themeservice.dll \Device\HarddiskVolume3\Windows\System32\themeservice.dll (0x00007FFFA0A10000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) 2864: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\sysmain.dll \Device\HarddiskVolume3\Windows\System32\sysmain.dll (0x00007FFFA0910000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) c:\windows\system32\POWRPROF.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) 2184: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\sessenv.dll \Device\HarddiskVolume3\Windows\System32\SessEnv.dll (0x00007FFFA07F0000) c:\windows\system32\SYSNTFY.dll \Device\HarddiskVolume3\Windows\System32\sysntfy.dll (0x00007FFFA7010000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\RdvVmTransport.dll \Device\HarddiskVolume3\Windows\System32\rdvvmtransport.dll (0x00007FFFA0650000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\vmbuspipe.dll \Device\HarddiskVolume3\Windows\System32\vmbuspipe.dll (0x00007FFFA2530000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) c:\windows\system32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\System32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\System32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) C:\WINDOWS\System32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) 2204: (ERROR 5) 2588: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\dnsrslvr.dll \Device\HarddiskVolume3\Windows\System32\dnsrslvr.dll (0x00007FFFA0720000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\SYSTEM32\Fwpuclnt.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL (0x00007FFFA0590000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\SYSTEM32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) 3076: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\sens.dll \Device\HarddiskVolume3\Windows\System32\Sens.dll (0x00007FFFA07D0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) c:\windows\system32\SYSNTFY.dll \Device\HarddiskVolume3\Windows\System32\sysntfy.dll (0x00007FFFA7010000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\ES.DLL \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) 3172: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\fntcache.dll \Device\HarddiskVolume3\Windows\System32\FntCache.dll (0x00007FFFA0360000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\FontProvider.dll \Device\HarddiskVolume3\Windows\System32\FontProvider.dll (0x00007FFFA01B0000) c:\windows\system32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) 3180: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\audioendpointbuilder.dll \Device\HarddiskVolume3\Windows\System32\AudioEndpointBuilder.dll (0x00007FFFA02B0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\MMDevApi.dll \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll (0x00007FFFA0200000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\rdpendp.dll \Device\HarddiskVolume3\Windows\System32\rdpendp.dll (0x00007FFFA8E30000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) 3436: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\audiosrv.dll \Device\HarddiskVolume3\Windows\System32\audiosrv.dll (0x00007FFF9FCA0000) c:\windows\system32\AUDIOSRVPOLICYMANAGER.dll \Device\HarddiskVolume3\Windows\System32\AudioSrvPolicyManager.dll (0x00007FFF9FFF0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\MMDevApi.dll \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll (0x00007FFFA0200000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\coreaudiopolicymanagerext.dll \Device\HarddiskVolume3\Windows\System32\coreaudiopolicymanagerext.dll (0x00007FFFA1700000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\Windows\System32\AudioSes.dll \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\WINDOWS\System32\rdpendp.dll \Device\HarddiskVolume3\Windows\System32\rdpendp.dll (0x00007FFFA8E30000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\Windows.Media.Devices.dll \Device\HarddiskVolume3\Windows\System32\Windows.Media.Devices.dll (0x00007FFF82DF0000) c:\windows\system32\CompPkgSup.DLL \Device\HarddiskVolume3\Windows\System32\CompPkgSup.dll (0x00007FFF82B60000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) c:\windows\system32\HrtfApo.dll \Device\HarddiskVolume3\Windows\System32\HrtfApo.dll (0x00007FFF62D50000) C:\Windows\System32\Windows.Perception.Stub.dll \Device\HarddiskVolume3\Windows\System32\Windows.Perception.Stub.dll (0x00007FFF62A90000) 3540: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\tabsvc.dll \Device\HarddiskVolume3\Windows\System32\TabSvc.dll (0x00007FFF9FF40000) c:\windows\system32\HID.DLL \Device\HarddiskVolume3\Windows\System32\hid.dll (0x00007FFFA7EE0000) C:\WINDOWS\System32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) 3636: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\dusmsvc.dll \Device\HarddiskVolume3\Windows\System32\dusmsvc.dll (0x00007FFF9F810000) c:\windows\system32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) c:\windows\system32\SrumAPI.dll \Device\HarddiskVolume3\Windows\System32\srumapi.dll (0x00007FFF9AE00000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) 3644: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\dhcpcore.dll \Device\HarddiskVolume3\Windows\System32\dhcpcore.dll (0x00007FFF9F1E0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\SYSTEM32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\system32\dhcpcore6.dll \Device\HarddiskVolume3\Windows\System32\dhcpcore6.dll (0x00007FFF9F0E0000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) 3780: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) 3828: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wcmsvc.dll \Device\HarddiskVolume3\Windows\System32\wcmsvc.dll (0x00007FFF9EF70000) c:\windows\system32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) c:\windows\system32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) c:\windows\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\SYSTEM32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\cmintegrator.dll \Device\HarddiskVolume3\Windows\System32\cmintegrator.dll (0x00007FFF9EF00000) C:\WINDOWS\system32\wcmcsp.dll \Device\HarddiskVolume3\Windows\System32\wcmcsp.dll (0x00007FFF9EEB0000) 3856: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\shsvcs.dll \Device\HarddiskVolume3\Windows\System32\shsvcs.dll (0x00007FFF9EF20000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) c:\windows\system32\FVEAPI.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll (0x00007FFFA44D0000) c:\windows\system32\tbs.dll \Device\HarddiskVolume3\Windows\System32\tbs.dll (0x00007FFFA3940000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\ProximityService.dll \Device\HarddiskVolume3\Windows\System32\ProximityService.dll (0x00007FFF9E7B0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\ProximityCommon.dll \Device\HarddiskVolume3\Windows\System32\ProximityCommon.dll (0x00007FFF9E6E0000) C:\WINDOWS\System32\ProximityCommonPal.dll \Device\HarddiskVolume3\Windows\System32\ProximityCommonPal.dll (0x00007FFF9FF30000) C:\WINDOWS\System32\ProximityServicePAL.dll \Device\HarddiskVolume3\Windows\System32\ProximityServicePal.dll (0x00007FFF9CF90000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\System32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\Rmapi.dll \Device\HarddiskVolume3\Windows\System32\RMapi.dll (0x00007FFF9CEF0000) c:\windows\system32\HID.DLL \Device\HarddiskVolume3\Windows\System32\hid.dll (0x00007FFFA7EE0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) 4012: spoolsv.exe C:\WINDOWS\System32\spoolsv.exe \Device\HarddiskVolume3\Windows\System32\spoolsv.exe (0x00007FF628D50000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\System32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\System32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) C:\WINDOWS\System32\fwpuclnt.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL (0x00007FFFA0590000) C:\WINDOWS\System32\localspl.dll \Device\HarddiskVolume3\Windows\System32\localspl.dll (0x00007FFFA8CA0000) C:\WINDOWS\System32\SPOOLSS.DLL \Device\HarddiskVolume3\Windows\System32\spoolss.dll (0x00007FFF95CC0000) C:\WINDOWS\system32\winspool.drv \Device\HarddiskVolume3\Windows\System32\winspool.drv (0x00007FFFA9AF0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\PrintIsolationProxy.dll \Device\HarddiskVolume3\Windows\System32\PrintIsolationProxy.dll (0x00007FFF93FF0000) C:\WINDOWS\System32\AppMon.dll \Device\HarddiskVolume3\Windows\System32\AppMon.dll (0x00007FFF92AD0000) C:\WINDOWS\System32\tcpmon.dll \Device\HarddiskVolume3\Windows\System32\tcpmon.dll (0x00007FFF92A70000) C:\WINDOWS\System32\snmpapi.dll \Device\HarddiskVolume3\Windows\System32\snmpapi.dll (0x00007FFF92860000) C:\WINDOWS\System32\wsnmp32.dll \Device\HarddiskVolume3\Windows\System32\wsnmp32.dll (0x00007FFF92840000) C:\WINDOWS\System32\usbmon.dll \Device\HarddiskVolume3\Windows\System32\usbmon.dll (0x00007FFF926D0000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\VirtualMon.dll \Device\HarddiskVolume3\Windows\System32\VirtualMon.dll (0x00007FFF92690000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\APMon.dll \Device\HarddiskVolume3\Windows\System32\APMon.dll (0x00007FFF924D0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\msxml6.dll \Device\HarddiskVolume3\Windows\System32\msxml6.dll (0x00007FFF9A1E0000) C:\WINDOWS\System32\SETUPAPI.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\System32\drvstore.dll \Device\HarddiskVolume3\Windows\System32\drvstore.dll (0x00007FFF9C030000) C:\WINDOWS\system32\spool\PRTPROCS\x64\winprint.dll \Device\HarddiskVolume3\Windows\System32\spool\prtprocs\x64\winprint.dll (0x00007FFF92420000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\win32spl.dll \Device\HarddiskVolume3\Windows\System32\win32spl.dll (0x00007FFF91E90000) C:\WINDOWS\System32\inetpp.dll \Device\HarddiskVolume3\Windows\System32\inetpp.dll (0x00007FFF923D0000) C:\WINDOWS\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\System32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\cscapi.dll \Device\HarddiskVolume3\Windows\System32\cscapi.dll (0x00007FFF923B0000) C:\WINDOWS\System32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\system32\spool\DRIVERS\x64\3\tsprint.dll \Device\HarddiskVolume3\Windows\System32\spool\drivers\x64\3\tsprint.dll (0x00007FFF91AD0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\bidispl.dll \Device\HarddiskVolume3\Windows\System32\bidispl.dll (0x00007FFF8A3C0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) 4068: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\bfe.dll \Device\HarddiskVolume3\Windows\System32\BFE.DLL (0x00007FFF9E810000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) c:\windows\system32\AUTHZ.dll \Device\HarddiskVolume3\Windows\System32\authz.dll (0x00007FFFA83A0000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\wevtapi.dll (0x00007FFFA4620000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) c:\windows\system32\mpssvc.dll \Device\HarddiskVolume3\Windows\System32\MPSSVC.dll (0x00007FFF9D190000) c:\windows\system32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\embeddedmodesvcapi.dll \Device\HarddiskVolume3\Windows\System32\embeddedmodesvcapi.dll (0x00007FFFA70C0000) c:\windows\system32\fwpuclnt.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL (0x00007FFFA0590000) c:\windows\system32\FWPolicyIOMgr.dll \Device\HarddiskVolume3\Windows\System32\fwpolicyiomgr.dll (0x00007FFF9DE50000) c:\windows\system32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\httpprxc.dll \Device\HarddiskVolume3\Windows\System32\httpprxc.dll (0x00007FFFA3630000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\adhapi.dll \Device\HarddiskVolume3\Windows\System32\adhapi.dll (0x00007FFF9B3B0000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\system32\wfapigp.dll \Device\HarddiskVolume3\Windows\System32\wfapigp.dll (0x00007FFF9B350000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) 3304: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\windows.staterepository.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepository.dll (0x00007FFF9C870000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) c:\windows\system32\StateRepository.Core.dll \Device\HarddiskVolume3\Windows\System32\StateRepository.Core.dll (0x00007FFF9C5B0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) 3532: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\diagtrack.dll \Device\HarddiskVolume3\Windows\System32\diagtrack.dll (0x00007FFF9D9A0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\tdh.dll \Device\HarddiskVolume3\Windows\System32\tdh.dll (0x00007FFF9E090000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\system32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\system32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) c:\windows\system32\DiagnosticDataSettings.dll \Device\HarddiskVolume3\Windows\System32\DiagnosticDataSettings.dll (0x00007FFFAA1D0000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\System32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\WINDOWS\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll \Device\HarddiskVolume3\Windows\System32\CorePrivacySettingsStore.dll (0x00007FFFA99D0000) C:\WINDOWS\SYSTEM32\wldp.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll (0x00007FFFA9960000) C:\WINDOWS\SYSTEM32\Netapi32.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll (0x00007FFF95F70000) C:\WINDOWS\SYSTEM32\DSREG.DLL \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) c:\windows\system32\winsqlite3.dll \Device\HarddiskVolume3\Windows\System32\winsqlite3.dll (0x00007FFF96A90000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\FlightSettings.dll \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll (0x00007FFF9A750000) C:\Windows\System32\fcon.dll \Device\HarddiskVolume3\Windows\System32\fcon.dll (0x00007FFF9F590000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\aepic.dll \Device\HarddiskVolume3\Windows\System32\aepic.dll (0x00007FFF95AB0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) c:\windows\system32\WindowsPerformanceRecorderControl.dll \Device\HarddiskVolume3\Windows\System32\windowsperformancerecordercontrol.dll (0x00007FFF95B80000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\system32\wshhyperv.dll \Device\HarddiskVolume3\Windows\System32\wshhyperv.dll (0x00007FFFA70E0000) C:\WINDOWS\SYSTEM32\sfc.dll \Device\HarddiskVolume3\Windows\System32\sfc.dll (0x0000015BB16A0000) C:\WINDOWS\SYSTEM32\sfc_os.DLL \Device\HarddiskVolume3\Windows\System32\sfc_os.dll (0x00007FFF9F660000) C:\WINDOWS\SYSTEM32\ServicingCommon.dll \Device\HarddiskVolume3\Windows\System32\ServicingCommon.dll (0x00007FFFAA620000) c:\windows\system32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll (0x00007FFF9AC80000) C:\WINDOWS\SYSTEM32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) c:\windows\system32\OneSettingsClient.dll \Device\HarddiskVolume3\Windows\System32\OneSettingsClient.dll (0x00007FFFA9130000) c:\windows\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll (0x00007FFF9FBB0000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\WINDOWS\System32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\SYSTEM32\webio.dll \Device\HarddiskVolume3\Windows\System32\webio.dll (0x00007FFFA9060000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll (0x00007FFF8EAE0000) 3516: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\iphlpsvc.dll \Device\HarddiskVolume3\Windows\System32\iphlpsvc.dll (0x00007FFF9D070000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) c:\windows\system32\MSWSOCK.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) c:\windows\system32\fwpuclnt.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL (0x00007FFFA0590000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\httpprxm.dll \Device\HarddiskVolume3\Windows\System32\httpprxm.dll (0x00007FFF9BD40000) C:\WINDOWS\system32\adhsvc.dll \Device\HarddiskVolume3\Windows\System32\adhsvc.dll (0x00007FFF9BCA0000) C:\WINDOWS\System32\WLDAP32.dll \Device\HarddiskVolume3\Windows\System32\Wldap32.dll (0x00007FFFABAD0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\FirewallAPI.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\System32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\httpprxc.dll \Device\HarddiskVolume3\Windows\System32\httpprxc.dll (0x00007FFFA3630000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\System32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) c:\windows\system32\WMICLNT.dll \Device\HarddiskVolume3\Windows\System32\wmiclnt.dll (0x00007FFFA38E0000) c:\windows\system32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\System32\logoncli.dll \Device\HarddiskVolume3\Windows\System32\logoncli.dll (0x00007FFFA9360000) C:\WINDOWS\System32\FWPolicyIOMgr.dll \Device\HarddiskVolume3\Windows\System32\fwpolicyiomgr.dll (0x00007FFF9DE50000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\authz.dll \Device\HarddiskVolume3\Windows\System32\authz.dll (0x00007FFFA83A0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) 3120: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\dps.dll \Device\HarddiskVolume3\Windows\System32\dps.dll (0x00007FFF9D150000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) c:\windows\system32\wdi.dll \Device\HarddiskVolume3\Windows\System32\wdi.dll (0x00007FFF9BC70000) C:\WINDOWS\system32\diagperf.dll \Device\HarddiskVolume3\Windows\System32\diagperf.dll (0x00007FFF9B0F0000) C:\WINDOWS\system32\pnpts.dll \Device\HarddiskVolume3\Windows\System32\pnpts.dll (0x00007FFF9B300000) C:\WINDOWS\system32\pots.dll \Device\HarddiskVolume3\Windows\System32\pots.dll (0x00007FFF9B260000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\System32\tdh.dll \Device\HarddiskVolume3\Windows\System32\tdh.dll (0x00007FFF9E090000) C:\WINDOWS\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\srumsvc.dll \Device\HarddiskVolume3\Windows\System32\srumsvc.dll (0x00007FFF9B7F0000) C:\WINDOWS\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\ESENT.dll \Device\HarddiskVolume3\Windows\System32\esent.dll (0x00007FFF9B3C0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\eeprov.dll \Device\HarddiskVolume3\Windows\System32\eeprov.dll (0x00007FFF9E3E0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\System32\vfuprov.dll \Device\HarddiskVolume3\Windows\System32\vfuprov.dll (0x00007FFF9B880000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\nduprov.dll \Device\HarddiskVolume3\Windows\System32\nduprov.dll (0x00007FFF9AE20000) C:\WINDOWS\System32\wpnsruprov.dll \Device\HarddiskVolume3\Windows\System32\wpnsruprov.dll (0x00007FFF9B320000) C:\WINDOWS\System32\appsruprov.dll \Device\HarddiskVolume3\Windows\System32\appsruprov.dll (0x00007FFF9B220000) C:\WINDOWS\System32\ncuprov.dll \Device\HarddiskVolume3\Windows\System32\ncuprov.dll (0x00007FFF9B860000) C:\WINDOWS\System32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\System32\energyprov.dll \Device\HarddiskVolume3\Windows\System32\energyprov.dll (0x00007FFF9AD90000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\srumapi.dll \Device\HarddiskVolume3\Windows\System32\srumapi.dll (0x00007FFF9AE00000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\radardt.dll \Device\HarddiskVolume3\Windows\System32\radardt.dll (0x00007FFF8A280000) C:\WINDOWS\System32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) 3588: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\trkwks.dll \Device\HarddiskVolume3\Windows\System32\trkwks.dll (0x00007FFF9D340000) C:\WINDOWS\System32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) 3740: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wpnservice.dll \Device\HarddiskVolume3\Windows\System32\wpnservice.dll (0x00007FFF9D010000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\wpncore.dll \Device\HarddiskVolume3\Windows\System32\wpncore.dll (0x00007FFF9BE90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) 3804: (ERROR 5) 1008: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wbem\wmisvc.dll \Device\HarddiskVolume3\Windows\System32\wbem\WMIsvc.dll (0x00007FFF9D300000) C:\WINDOWS\SYSTEM32\wbemcomn.dll \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll (0x00007FFF9C260000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\WMICLNT.dll \Device\HarddiskVolume3\Windows\System32\wmiclnt.dll (0x00007FFFA38E0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\vssapi.dll \Device\HarddiskVolume3\Windows\System32\vssapi.dll (0x00007FFFA1BA0000) C:\WINDOWS\SYSTEM32\VssTrace.DLL \Device\HarddiskVolume3\Windows\System32\vsstrace.dll (0x00007FFFA1A90000) C:\WINDOWS\SYSTEM32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\ES.DLL \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\system32\wbem\wbemcore.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemcore.dll (0x00007FFF94940000) C:\WINDOWS\system32\wbem\esscli.dll \Device\HarddiskVolume3\Windows\System32\wbem\esscli.dll (0x00007FFF947D0000) C:\WINDOWS\system32\wbem\FastProx.dll \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll (0x00007FFF94840000) C:\WINDOWS\system32\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll (0x00007FFF95B60000) C:\WINDOWS\system32\authZ.dll \Device\HarddiskVolume3\Windows\System32\authz.dll (0x00007FFFA83A0000) C:\WINDOWS\system32\wbem\wmiutils.dll \Device\HarddiskVolume3\Windows\System32\wbem\wmiutils.dll (0x00007FFF947A0000) C:\WINDOWS\system32\wbem\repdrvfs.dll \Device\HarddiskVolume3\Windows\System32\wbem\repdrvfs.dll (0x00007FFF94730000) C:\WINDOWS\SYSTEM32\amsi.dll \Device\HarddiskVolume3\Windows\System32\amsi.dll (0x00007FFFA0890000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOAV.dll (0x00007FFFA0670000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\system32\wbem\wmiprvsd.dll \Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSD.dll (0x00007FFF92990000) C:\WINDOWS\SYSTEM32\NCObjAPI.DLL \Device\HarddiskVolume3\Windows\System32\ncobjapi.dll (0x00007FFF95A00000) C:\WINDOWS\system32\wbem\wbemess.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemess.dll (0x00007FFF92910000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) 4004: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wsaifabrichost.dll \Device\HarddiskVolume3\Windows\System32\WSAIFabricHost.dll (0x00007FFF9C1B0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\drvstore.dll \Device\HarddiskVolume3\Windows\System32\drvstore.dll (0x00007FFF9C030000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) 2852: (ERROR 5) 4224: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\srvsvc.dll \Device\HarddiskVolume3\Windows\System32\srvsvc.dll (0x00007FFF9BCC0000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\SSCORE.DLL \Device\HarddiskVolume3\Windows\System32\sscore.dll (0x00007FFF9B0D0000) C:\WINDOWS\SYSTEM32\sscoreext.dll \Device\HarddiskVolume3\Windows\System32\sscoreext.dll (0x00007FFF9B0C0000) C:\WINDOWS\system32\mi.dll \Device\HarddiskVolume3\Windows\System32\mi.dll (0x00007FFF9B090000) C:\WINDOWS\system32\miutils.dll \Device\HarddiskVolume3\Windows\System32\miutils.dll (0x00007FFF9B020000) C:\WINDOWS\system32\wmidcom.dll \Device\HarddiskVolume3\Windows\System32\wmidcom.dll (0x00007FFF9BC30000) C:\WINDOWS\system32\FirewallAPI.DLL \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\system32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\system32\RESUTILS.DLL \Device\HarddiskVolume3\Windows\System32\resutils.dll (0x00007FFF9B280000) C:\WINDOWS\system32\CLUSAPI.DLL \Device\HarddiskVolume3\Windows\System32\clusapi.dll (0x00007FFF9AE70000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) c:\windows\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) c:\windows\system32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) 4632: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wlidsvc.dll \Device\HarddiskVolume3\Windows\System32\wlidsvc.dll (0x00007FFF9A420000) c:\windows\system32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\msxml6.dll \Device\HarddiskVolume3\Windows\System32\msxml6.dll (0x00007FFF9A1E0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\System32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) c:\windows\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) c:\windows\system32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\system32\PCPKsp.dll \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll (0x00007FFF9F3C0000) C:\WINDOWS\system32\tbs.dll \Device\HarddiskVolume3\Windows\System32\tbs.dll (0x00007FFFA3940000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\WINDOWS\SYSTEM32\gamestreamingext.dll \Device\HarddiskVolume3\Windows\System32\gamestreamingext.dll (0x00007FFF9FC30000) C:\WINDOWS\SYSTEM32\msauserext.dll \Device\HarddiskVolume3\Windows\System32\msauserext.dll (0x00007FFF961C0000) c:\windows\system32\popkeycli.dll \Device\HarddiskVolume3\Windows\System32\popkeycli.dll (0x00007FFF96190000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) 4744: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\rmapi.dll \Device\HarddiskVolume3\Windows\System32\RMapi.dll (0x00007FFF9CEF0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) c:\windows\system32\HID.DLL \Device\HarddiskVolume3\Windows\System32\hid.dll (0x00007FFFA7EE0000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\system32\WwanRadioManager.dll \Device\HarddiskVolume3\Windows\System32\WwanRadioManager.dll (0x00007FFF9F670000) C:\WINDOWS\SYSTEM32\wwapi.dll \Device\HarddiskVolume3\Windows\System32\wwapi.dll (0x00007FFF9F1A0000) C:\WINDOWS\SYSTEM32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\WINDOWS\system32\XboxGipRadioManager.dll \Device\HarddiskVolume3\Windows\System32\XboxGipRadioManager.dll (0x00007FFF9F500000) C:\WINDOWS\system32\NfcRadioMedia.dll \Device\HarddiskVolume3\Windows\System32\NfcRadioMedia.dll (0x00007FFF9F260000) C:\WINDOWS\system32\WlanRadioManager.dll \Device\HarddiskVolume3\Windows\System32\WlanRadioManager.dll (0x00007FFF9F180000) C:\WINDOWS\SYSTEM32\wlanapi.dll \Device\HarddiskVolume3\Windows\System32\wlanapi.dll (0x00007FFFA0C00000) C:\WINDOWS\system32\BthRadioMedia.dll \Device\HarddiskVolume3\Windows\System32\BthRadioMedia.dll (0x00007FFF9FF00000) C:\WINDOWS\SYSTEM32\bluetoothapis.dll \Device\HarddiskVolume3\Windows\System32\BluetoothApis.dll (0x00007FFF9FEB0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) 4880: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\capabilityaccessmanager.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManager.dll (0x00007FFF96BA0000) c:\windows\system32\winsqlite3.dll \Device\HarddiskVolume3\Windows\System32\winsqlite3.dll (0x00007FFF96A90000) c:\windows\system32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\capabilityaccessmanager.desktop.storage.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManager.Desktop.Storage.dll (0x00007FFF96350000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\CapabilityAccessManagerClient.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManagerClient.dll (0x00007FFF86C40000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\system32\wifidatacapabilityhandler.dll \Device\HarddiskVolume3\Windows\System32\wifidatacapabilityhandler.dll (0x00007FFF678D0000) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll \Device\HarddiskVolume3\Windows\System32\cellulardatacapabilityhandler.dll (0x00007FFF678B0000) 4888: (ERROR 5) 5068: AggregatorHost.exe C:\WINDOWS\System32\AggregatorHost.exe \Device\HarddiskVolume3\Windows\System32\AggregatorHost.exe (0x00007FF7A4450000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\UpdateReboot.dll \Device\HarddiskVolume3\Windows\System32\UpdateReboot.dll (0x00007FFF95F40000) C:\WINDOWS\SYSTEM32\MpeCm.dll \Device\HarddiskVolume3\Windows\System32\MpeCm.dll (0x00007FFF95EF0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\DiagnosticDataQuery.dll \Device\HarddiskVolume3\Windows\System32\diagnosticdataquery.dll (0x00007FFF95E80000) C:\WINDOWS\SYSTEM32\MediaFoundationAggregator.dll \Device\HarddiskVolume3\Windows\System32\MediaFoundationAggregator.dll (0x00007FFF95E50000) C:\WINDOWS\SYSTEM32\CodeIntegrityAggregator.dll \Device\HarddiskVolume3\Windows\System32\CodeIntegrityAggregator.dll (0x00007FFF95E00000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\MissionControlAggregator.dll \Device\HarddiskVolume3\Windows\System32\MissionControlAggregator.dll (0x00007FFF95DC0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\wusys.dll \Device\HarddiskVolume3\Windows\System32\wusys.dll (0x00007FFFA08B0000) C:\WINDOWS\uus\packages\preview\AMD64\uusbrain.dll \Device\HarddiskVolume3\Windows\UUS\Packages\Preview\amd64\UusBrain.dll (0x00007FFF9A9D0000) C:\WINDOWS\uus\packages\preview\AMD64\UusFailover.dll \Device\HarddiskVolume3\Windows\UUS\Packages\Preview\amd64\UusFailover.dll (0x00007FFF95D70000) C:\WINDOWS\uus\packages\preview\AMD64\UpdatePlatformAggregators.dll \Device\HarddiskVolume3\Windows\UUS\Packages\Preview\amd64\UpdatePlatformAggregators.dll (0x00007FFF95D00000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) 764: (ERROR 5) 1176: winlogon.exe C:\WINDOWS\system32\winlogon.exe \Device\HarddiskVolume3\Windows\System32\winlogon.exe (0x00007FF78C060000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\utcapi.dll \Device\HarddiskVolume3\Windows\System32\utcapi.dll (0x00007FFFAA830000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\profext.dll \Device\HarddiskVolume3\Windows\System32\profext.dll (0x00007FFFA8140000) C:\WINDOWS\system32\Bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\system32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\SYSTEM32\uxinit.dll \Device\HarddiskVolume3\Windows\System32\UXInit.dll (0x00007FFFA6DC0000) C:\WINDOWS\system32\UxTheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\system32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\dwminit.dll \Device\HarddiskVolume3\Windows\System32\dwminit.dll (0x00007FFFA6BE0000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\system32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\SYSTEM32\camext.dll \Device\HarddiskVolume3\Windows\System32\camext.dll (0x00007FFFAA180000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\system32\MPR.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll (0x00007FFF9D370000) 5340: fontdrvhost.exe C:\WINDOWS\system32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32\fontdrvhost.exe (0x00007FF6837A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) 5348: WUDFHost.exe C:\Windows\System32\WUDFHost.exe \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe (0x00007FF7037F0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\WUDFPlatform.dll \Device\HarddiskVolume3\Windows\System32\WUDFPlatform.dll (0x00007FFFA8220000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Windows\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\driverstore\filerepository\rdpidd.inf_amd64_449e893f6a845b9b\rdpidd.dll \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\rdpidd.inf_amd64_449e893f6a845b9b\RdpIdd.dll (0x00007FFFA8B00000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\Windows\System32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\Windows\System32\WppRecorderUM.dll \Device\HarddiskVolume3\Windows\System32\WppRecorderUM.dll (0x00007FFFA9000000) C:\WINDOWS\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\Windows\System32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\dbghelp.dll (0x00007FFFAA2F0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\WUDFx02000.dll \Device\HarddiskVolume3\Windows\System32\WUDFx02000.dll (0x00007FFF94EE0000) c:\windows\system32\drivers\umdf\iddcx.dll \Device\HarddiskVolume3\Windows\System32\drivers\UMDF\IddCx.dll (0x00007FFFA8A80000) C:\Windows\System32\DWrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\Windows\System32\RdpAvenc.dll \Device\HarddiskVolume3\Windows\System32\RdpAvenc.dll (0x00007FFF94EA0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\Windows\System32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) 5384: dwm.exe C:\WINDOWS\system32\dwm.exe \Device\HarddiskVolume3\Windows\System32\dwm.exe (0x00007FF6BF270000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\SYSTEM32\dwmredir.dll \Device\HarddiskVolume3\Windows\System32\dwmredir.dll (0x00007FFFA69B0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\SYSTEM32\udwm.dll \Device\HarddiskVolume3\Windows\System32\uDWM.dll (0x00007FFFA6860000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\system32\dwmcore.dll \Device\HarddiskVolume3\Windows\System32\dwmcore.dll (0x00007FFFA62E0000) C:\WINDOWS\system32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\system32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\system32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\system32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\system32\DWrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\system32\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\WINDOWS\system32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\system32\D3DCOMPILER_47.dll \Device\HarddiskVolume3\Windows\System32\D3DCompiler_47.dll (0x00007FFFA4F70000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\system32\avrt.dll \Device\HarddiskVolume3\Windows\System32\avrt.dll (0x00007FFFA3350000) C:\WINDOWS\SYSTEM32\ism.dll \Device\HarddiskVolume3\Windows\System32\ISM.dll (0x00007FFFA30B0000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\system32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\dwmghost.dll \Device\HarddiskVolume3\Windows\System32\dwmghost.dll (0x00007FFFA2DA0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\windowmanagementapi.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\system32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\imagehlp.dll \Device\HarddiskVolume3\Windows\System32\imagehlp.dll (0x00007FFFAC000000) C:\Windows\System32\DispBroker.dll \Device\HarddiskVolume3\Windows\System32\DispBroker.dll (0x00007FFFA23C0000) C:\Windows\System32\DispBroker.Desktop.dll \Device\HarddiskVolume3\Windows\System32\DispBroker.Desktop.dll (0x00007FFFA2280000) C:\WINDOWS\System32\UIAnimation.dll \Device\HarddiskVolume3\Windows\System32\UIAnimation.dll (0x00007FFFA1740000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) c:\windows\system32\gameinput.dll \Device\HarddiskVolume3\Windows\System32\GameInput.dll (0x00007FFFA1D90000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\Windows.Gaming.Input.dll \Device\HarddiskVolume3\Windows\System32\Windows.Gaming.Input.dll (0x00007FFFA1AB0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\WINDOWS\system32\wuceffects.dll \Device\HarddiskVolume3\Windows\System32\wuceffects.dll (0x00007FFF866B0000) C:\WINDOWS\system32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\system32\Cabinet.dll \Device\HarddiskVolume3\Windows\System32\cabinet.dll (0x00007FFF878B0000) C:\WINDOWS\system32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) 5744: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\scdeviceenum.dll \Device\HarddiskVolume3\Windows\System32\ScDeviceEnum.dll (0x00007FFFA8810000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) c:\windows\system32\WinSCard.dll \Device\HarddiskVolume3\Windows\System32\WinSCard.dll (0x00007FFFA2100000) c:\windows\system32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) c:\windows\system32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) c:\windows\system32\DEVRTL.dll \Device\HarddiskVolume3\Windows\System32\devrtl.dll (0x00007FFFA9170000) 5936: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\devicesetupmanager.dll \Device\HarddiskVolume3\Windows\System32\DeviceSetupManager.dll (0x00007FFF94BD0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\DEVRTL.dll \Device\HarddiskVolume3\Windows\System32\devrtl.dll (0x00007FFFA9170000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\DeviceDriverRetrievalClient.dll \Device\HarddiskVolume3\Windows\System32\DeviceDriverRetrievalClient.dll (0x00007FFFA8FC0000) C:\WINDOWS\System32\DeviceSoftwareInstallationClient.dll \Device\HarddiskVolume3\Windows\System32\DeviceSoftwareInstallationClient.dll (0x00007FFF94B80000) C:\WINDOWS\System32\DevPropMgr.dll \Device\HarddiskVolume3\Windows\System32\DevPropMgr.dll (0x00007FFF94B40000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\DDORes.dll \Device\HarddiskVolume3\Windows\System32\DDORes.dll (0x00007FFFA87F0000) C:\WINDOWS\system32\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll (0x00007FFF94B20000) C:\WINDOWS\SYSTEM32\wbemcomn.dll \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll (0x00007FFF9C260000) C:\WINDOWS\system32\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll (0x00007FFF95B60000) C:\WINDOWS\system32\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll (0x00007FFF94840000) C:\WINDOWS\SYSTEM32\amsi.dll \Device\HarddiskVolume3\Windows\System32\amsi.dll (0x00007FFFA0890000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOAV.dll (0x00007FFFA0670000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\DeviceMetadataRetrievalClient.dll \Device\HarddiskVolume3\Windows\System32\DeviceMetadataRetrievalClient.dll (0x00007FFF92880000) C:\WINDOWS\System32\setupapi.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\system32\drvstore.dll \Device\HarddiskVolume3\Windows\System32\drvstore.dll (0x00007FFF9C030000) C:\WINDOWS\system32\SPINF.dll \Device\HarddiskVolume3\Windows\System32\spinf.dll (0x00007FFFA2150000) C:\WINDOWS\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) 5480: wmiprvse.exe C:\WINDOWS\system32\wbem\wmiprvse.exe \Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSE.exe (0x00007FF7B0770000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\system32\wbem\FastProx.dll \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll (0x00007FFF94840000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\SYSTEM32\NCObjAPI.DLL \Device\HarddiskVolume3\Windows\System32\ncobjapi.dll (0x00007FFF95A00000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\wbemcomn.dll \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll (0x00007FFF9C260000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll (0x00007FFF94B20000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll (0x00007FFF95B60000) C:\WINDOWS\system32\wbem\wmiutils.dll \Device\HarddiskVolume3\Windows\System32\wbem\wmiutils.dll (0x00007FFF947A0000) C:\WINDOWS\system32\wbem\wmiprov.dll \Device\HarddiskVolume3\Windows\System32\wbem\wmiprov.dll (0x00007FFF928B0000) C:\WINDOWS\system32\wbem\esscli.dll \Device\HarddiskVolume3\Windows\System32\wbem\esscli.dll (0x00007FFF947D0000) C:\WINDOWS\SYSTEM32\WMICLNT.dll \Device\HarddiskVolume3\Windows\System32\wmiclnt.dll (0x00007FFFA38E0000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) 5368: DllHost.exe C:\WINDOWS\system32\DllHost.exe \Device\HarddiskVolume3\Windows\System32\dllhost.exe (0x00007FF611BB0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\DeviceMetadataRetrievalClient.dll \Device\HarddiskVolume3\Windows\System32\DeviceMetadataRetrievalClient.dll (0x00007FFF92880000) C:\WINDOWS\System32\DEVRTL.dll \Device\HarddiskVolume3\Windows\System32\devrtl.dll (0x00007FFFA9170000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) 5456: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wersvc.dll \Device\HarddiskVolume3\Windows\System32\wersvc.dll (0x00007FFFA8E90000) c:\windows\system32\DiagnosticDataSettings.dll \Device\HarddiskVolume3\Windows\System32\DiagnosticDataSettings.dll (0x00007FFFAA1D0000) c:\windows\system32\WindowsPerformanceRecorderControl.dll \Device\HarddiskVolume3\Windows\System32\windowsperformancerecordercontrol.dll (0x00007FFF95B80000) c:\windows\system32\WerEtw.dll \Device\HarddiskVolume3\Windows\System32\weretw.dll (0x00007FFFA9020000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll \Device\HarddiskVolume3\Windows\System32\CorePrivacySettingsStore.dll (0x00007FFFA99D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) c:\windows\system32\wer.dll \Device\HarddiskVolume3\Windows\System32\wer.dll (0x00007FFFAA1F0000) 3512: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\webthreatdefsvc.dll \Device\HarddiskVolume3\Windows\System32\webthreatdefsvc.dll (0x00007FFFAA140000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) c:\windows\system32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) c:\windows\system32\omadmapi.dll \Device\HarddiskVolume3\Windows\System32\omadmapi.dll (0x00007FFFAA100000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\ThreatIntelligence.dll \Device\HarddiskVolume3\Windows\System32\ThreatIntelligence.dll (0x00007FFFA9C70000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\tdh.dll \Device\HarddiskVolume3\Windows\System32\tdh.dll (0x00007FFF9E090000) C:\WINDOWS\SYSTEM32\WTDHOST.dll \Device\HarddiskVolume3\Windows\System32\wtdhost.dll (0x00007FFFA9C60000) C:\WINDOWS\System32\OLE32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\WTDSENSOR.dll \Device\HarddiskVolume3\Windows\System32\wtdsensor.dll (0x00007FFFA9C50000) C:\Windows\System32\webthreatdefusersvc.dll \Device\HarddiskVolume3\Windows\System32\webthreatdefusersvc.dll (0x00007FFF91260000) 4928: rdpclip.exe C:\WINDOWS\System32\rdpclip.exe \Device\HarddiskVolume3\Windows\System32\rdpclip.exe (0x00007FF7C0AB0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\twinapi.dll \Device\HarddiskVolume3\Windows\System32\twinapi.dll (0x00007FFF92110000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\WINDOWS\SYSTEM32\winspool.drv \Device\HarddiskVolume3\Windows\System32\winspool.drv (0x00007FFFA9AF0000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) 2792: sihost.exe C:\WINDOWS\system32\sihost.exe \Device\HarddiskVolume3\Windows\System32\sihost.exe (0x00007FF69C1B0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\system32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\desktopshellext.dll \Device\HarddiskVolume3\Windows\System32\DesktopShellExt.dll (0x00007FFF92010000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\system32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) C:\WINDOWS\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\Windows\System32\fcon.dll \Device\HarddiskVolume3\Windows\System32\fcon.dll (0x00007FFF9F590000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\Windows\System32\ClipboardServer.dll \Device\HarddiskVolume3\Windows\System32\ClipboardServer.dll (0x00007FFF91A20000) C:\Windows\System32\RMCLIENT.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\system32\activationmanager.dll \Device\HarddiskVolume3\Windows\System32\ActivationManager.dll (0x00007FFF91920000) C:\WINDOWS\System32\AppointmentActivation.dll \Device\HarddiskVolume3\Windows\System32\AppointmentActivation.dll (0x00007FFF921F0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\modernexecserver.dll \Device\HarddiskVolume3\Windows\System32\modernexecserver.dll (0x00007FFF911C0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\system32\ExecModelClient.dll \Device\HarddiskVolume3\Windows\System32\ExecModelClient.dll (0x00007FFF90E60000) C:\Windows\System32\windowmanagement.dll \Device\HarddiskVolume3\Windows\System32\WindowManagement.dll (0x00007FFF90BF0000) C:\Windows\System32\NotificationPlatformComponent.dll \Device\HarddiskVolume3\Windows\System32\notificationplatformcomponent.dll (0x00007FFF907E0000) C:\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll (0x00007FFF906D0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\windows.system.launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\Windows\System32\Windows.Storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\system32\PackageStateChangeHandler.dll \Device\HarddiskVolume3\Windows\System32\PackageStateChangeHandler.dll (0x00007FFF90650000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\WINDOWS\system32\ShareHost.dll \Device\HarddiskVolume3\Windows\System32\ShareHost.dll (0x00007FFF90340000) C:\WINDOWS\system32\twinui.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinui.appcore.dll (0x00007FFF901C0000) C:\Windows\System32\AudioSes.dll \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\Windows\System32\daxexec.dll \Device\HarddiskVolume3\Windows\System32\daxexec.dll (0x00007FFF900A0000) C:\Windows\System32\container.dll \Device\HarddiskVolume3\Windows\System32\container.dll (0x00007FFF90040000) C:\WINDOWS\system32\mssrch.dll \Device\HarddiskVolume3\Windows\System32\mssrch.dll (0x00007FFF8FD40000) C:\WINDOWS\system32\TQUERY.DLL \Device\HarddiskVolume3\Windows\System32\tquery.dll (0x00007FFF8F9D0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\system32\SearchIndexerCore.dll \Device\HarddiskVolume3\Windows\System32\SearchIndexerCore.dll (0x00007FFF8F8E0000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\CoreShellExtFramework.dll \Device\HarddiskVolume3\Windows\System32\CoreShellExtFramework.dll (0x00007FFF8F8A0000) C:\WINDOWS\system32\twinui.pcshell.dll \Device\HarddiskVolume3\Windows\System32\twinui.pcshell.dll (0x00007FFF8EF80000) C:\WINDOWS\system32\UIAutomationCore.DLL \Device\HarddiskVolume3\Windows\System32\UIAutomationCore.dll (0x00007FFF8EB40000) C:\WINDOWS\system32\wincorlib.DLL \Device\HarddiskVolume3\Windows\System32\wincorlib.dll (0x00007FFF9AAE0000) C:\WINDOWS\system32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\system32\activationclient.dll \Device\HarddiskVolume3\Windows\System32\ActivationClient.dll (0x00007FFF8E930000) C:\WINDOWS\system32\omadmapi.dll \Device\HarddiskVolume3\Windows\System32\omadmapi.dll (0x00007FFFAA100000) C:\Windows\System32\CloudExperienceHostCommon.dll \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostCommon.dll (0x00007FFF91060000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\Windows\System32\DMCmnUtils.dll \Device\HarddiskVolume3\Windows\System32\dmcmnutils.dll (0x00007FFF8E6E0000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\Windows\System32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\Windows\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\Windows\System32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\licensemanagerapi.dll \Device\HarddiskVolume3\Windows\System32\LicenseManagerApi.dll (0x00007FFF90BC0000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\Windows\System32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\Windows\System32\MPR.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll (0x00007FFF9D370000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\Windows.Security.Integrity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Integrity.dll (0x00007FFF90BA0000) C:\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll (0x00007FFF90460000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) 6220: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\cdpusersvc.dll \Device\HarddiskVolume3\Windows\System32\cdpusersvc.dll (0x00007FFF91860000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\cdp.dll \Device\HarddiskVolume3\Windows\System32\cdp.dll (0x00007FFF912B0000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) c:\windows\system32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\SYSTEM32\gamestreamingext.dll \Device\HarddiskVolume3\Windows\System32\gamestreamingext.dll (0x00007FFF9FC30000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) c:\windows\system32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) c:\windows\system32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\system32\ncryptprov.dll \Device\HarddiskVolume3\Windows\System32\ncryptprov.dll (0x00007FFF95FE0000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll (0x00007FFF8EAE0000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) c:\windows\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\Windows\System32\Windows.Devices.Radios.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Radios.dll (0x00007FFFA0070000) c:\windows\system32\winsqlite3.dll \Device\HarddiskVolume3\Windows\System32\winsqlite3.dll (0x00007FFF96A90000) 6276: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\webthreatdefusersvc.dll \Device\HarddiskVolume3\Windows\System32\webthreatdefusersvc.dll (0x00007FFF91260000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\ThreatResponseEngine.dll \Device\HarddiskVolume3\Windows\System32\ThreatResponseEngine.dll (0x00007FFF91030000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) 6332: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\wpnuserservice.dll \Device\HarddiskVolume3\Windows\System32\WpnUserService.dll (0x00007FFF91000000) c:\windows\system32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) c:\windows\system32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) c:\windows\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\wpncore.dll \Device\HarddiskVolume3\Windows\System32\wpncore.dll (0x00007FFF9BE90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\NotificationController.dll \Device\HarddiskVolume3\Windows\System32\NotificationController.dll (0x00007FFF90A40000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\RMCLIENT.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\Windows\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\QuietHours.dll \Device\HarddiskVolume3\Windows\System32\QuietHours.dll (0x00007FFF904B0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\winsqlite3.dll \Device\HarddiskVolume3\Windows\System32\winsqlite3.dll (0x00007FFF96A90000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\Windows\System32\execmodelclient.dll \Device\HarddiskVolume3\Windows\System32\ExecModelClient.dll (0x00007FFF90E60000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\Windows\System32\TileDataRepository.dll \Device\HarddiskVolume3\Windows\System32\TileDataRepository.dll (0x00007FFF8E540000) C:\Windows\System32\StateRepository.Core.dll \Device\HarddiskVolume3\Windows\System32\StateRepository.Core.dll (0x00007FFF9C5B0000) C:\Windows\System32\Windows.StateRepository.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepository.dll (0x00007FFF9C870000) C:\Windows\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.StateRepositoryClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\appresolver.dll \Device\HarddiskVolume3\Windows\System32\AppResolver.dll (0x00007FFF8E400000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll (0x00007FFF9F160000) C:\Windows\System32\wpnapps.dll \Device\HarddiskVolume3\Windows\System32\wpnapps.dll (0x00007FFF8DCF0000) C:\Windows\System32\Windows.CloudStore.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.dll (0x00007FFF940D0000) C:\Windows\System32\AppExtension.dll \Device\HarddiskVolume3\Windows\System32\AppExtension.dll (0x00007FFF91B10000) C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.Schema.Shell.dll (0x00007FFF8DB70000) C:\Windows\System32\NotificationControllerPS.dll \Device\HarddiskVolume3\Windows\System32\NotificationControllerPS.dll (0x00007FFF8CFA0000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\Windows\System32\CapabilityAccessManagerClient.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManagerClient.dll (0x00007FFF86C40000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\wpnclient.dll \Device\HarddiskVolume3\Windows\System32\wpnclient.dll (0x00007FFF82AE0000) C:\Windows\System32\ContentDeliveryManager.Utilities.dll \Device\HarddiskVolume3\Windows\System32\ContentDeliveryManager.Utilities.dll (0x00007FFF63D00000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\msxml6.dll \Device\HarddiskVolume3\Windows\System32\msxml6.dll (0x00007FFF9A1E0000) C:\WINDOWS\system32\twinapi.dll \Device\HarddiskVolume3\Windows\System32\twinapi.dll (0x00007FFF92110000) 6392: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\tokenbroker.dll \Device\HarddiskVolume3\Windows\System32\TokenBroker.dll (0x00007FFF90820000) c:\windows\system32\TOKENBINDING.dll \Device\HarddiskVolume3\Windows\System32\tokenbinding.dll (0x00007FFF907C0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\IDStore.dll \Device\HarddiskVolume3\Windows\System32\IDStore.dll (0x00007FFF971E0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\wlidprov.dll \Device\HarddiskVolume3\Windows\System32\wlidprov.dll (0x00007FFF94020000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll (0x00007FFF90460000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll (0x00007FFF8EAE0000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll (0x00007FFF906D0000) c:\windows\system32\OnDemandBrokerClient.dll \Device\HarddiskVolume3\Windows\System32\OnDemandBrokerClient.dll (0x00007FFF8E4C0000) c:\windows\system32\RMCLIENT.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\Windows\System32\windowscodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) 6404: MicrosoftEdgeUpdate.exe (WOW) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (0x0000000000E40000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ntdll.dll (0x0000000077290000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\SysWOW64\kernel32.dll (0x00000000761C0000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\SysWOW64\KernelBase.dll (0x0000000075370000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\SysWOW64\ole32.dll (0x0000000075B50000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\SysWOW64\msvcp_win.dll (0x0000000076BC0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase.dll (0x0000000076980000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\SysWOW64\gdi32.dll (0x00000000766F0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\SysWOW64\win32u.dll (0x00000000762C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\SysWOW64\gdi32full.dll (0x00000000762E0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\SysWOW64\user32.dll (0x0000000075970000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\SysWOW64\combase.dll (0x00000000756E0000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\SysWOW64\rpcrt4.dll (0x00000000768C0000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\SysWOW64\shell32.dll (0x0000000076C50000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\SysWOW64\WinTypes.dll (0x0000000074F30000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\SysWOW64\windows.storage.dll (0x0000000074610000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\SysWOW64\advapi32.dll (0x0000000076AA0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\SysWOW64\msvcrt.dll (0x00000000752A0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\SysWOW64\sechost.dll (0x0000000076B30000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\SysWOW64\SHCore.dll (0x0000000074CF0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\shlwapi.dll (0x0000000076500000) C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.207.5\msedgeupdate.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\1.3.207.5\msedgeupdate.dll (0x00000000743D0000) C:\WINDOWS\SYSTEM32\NETAPI32.dll \Device\HarddiskVolume3\Windows\SysWOW64\netapi32.dll (0x00000000743B0000) C:\WINDOWS\SYSTEM32\VERSION.dll \Device\HarddiskVolume3\Windows\SysWOW64\version.dll (0x00000000743A0000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\SysWOW64\wtsapi32.dll (0x0000000074380000) C:\WINDOWS\SYSTEM32\NETUTILS.DLL \Device\HarddiskVolume3\Windows\SysWOW64\netutils.dll (0x0000000074370000) C:\WINDOWS\SYSTEM32\WKSCLI.DLL \Device\HarddiskVolume3\Windows\SysWOW64\wkscli.dll (0x0000000074350000) C:\WINDOWS\SYSTEM32\DSREG.DLL \Device\HarddiskVolume3\Windows\SysWOW64\dsreg.dll (0x0000000074210000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\SysWOW64\userenv.dll (0x00000000741E0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\SysWOW64\crypt32.dll (0x0000000075040000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\profapi.dll (0x00000000741C0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\SysWOW64\kernel.appcore.dll (0x00000000741A0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcryptprimitives.dll (0x00000000763E0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\SysWOW64\winsta.dll (0x0000000074140000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\SysWOW64\clbcatq.dll (0x0000000074DD0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\SysWOW64\taskschd.dll (0x00000000740B0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\SysWOW64\oleaut32.dll (0x0000000076110000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\SysWOW64\sspicli.dll (0x0000000074080000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\SysWOW64\apphelp.dll (0x0000000073FD0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\SysWOW64\cryptbase.dll (0x0000000073FC0000) C:\WINDOWS\SYSTEM32\atlthunk.dll \Device\HarddiskVolume3\Windows\SysWOW64\atlthunk.dll (0x0000000073FA0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\wow64.dll \Device\HarddiskVolume3\Windows\System32\wow64.dll (0x00007FFFAD770000) C:\WINDOWS\System32\wow64base.dll \Device\HarddiskVolume3\Windows\System32\wow64base.dll (0x00007FFFABBF0000) C:\WINDOWS\System32\wow64win.dll \Device\HarddiskVolume3\Windows\System32\wow64win.dll (0x00007FFFAC150000) C:\WINDOWS\System32\wow64con.dll \Device\HarddiskVolume3\Windows\System32\wow64con.dll (0x00007FFFABBD0000) C:\WINDOWS\System32\wow64cpu.dll \Device\HarddiskVolume3\Windows\System32\wow64cpu.dll (0x0000000077280000) 6412: taskhostw.exe C:\WINDOWS\system32\taskhostw.exe \Device\HarddiskVolume3\Windows\System32\taskhostw.exe (0x00007FF7F25D0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\PlaySndSrv.dll \Device\HarddiskVolume3\Windows\System32\PlaySndSrv.dll (0x00007FFF906A0000) C:\WINDOWS\system32\wininet.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll (0x00007FFF9E110000) C:\WINDOWS\system32\MsCtfMonitor.dll \Device\HarddiskVolume3\Windows\System32\MsCtfMonitor.dll (0x00007FFF9EE90000) C:\WINDOWS\system32\MSUTB.dll \Device\HarddiskVolume3\Windows\System32\msutb.dll (0x00007FFF9EE30000) C:\WINDOWS\SYSTEM32\ESENT.dll \Device\HarddiskVolume3\Windows\System32\esent.dll (0x00007FFF9B3C0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\system32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\AudioSes.DLL \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) 6688: (ERROR 5) 6752: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\cdpsvc.dll \Device\HarddiskVolume3\Windows\System32\cdpsvc.dll (0x00007FFF8E5F0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) c:\windows\system32\cdp.dll \Device\HarddiskVolume3\Windows\System32\cdp.dll (0x00007FFF912B0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\gamestreamingext.dll \Device\HarddiskVolume3\Windows\System32\gamestreamingext.dll (0x00007FFF9FC30000) c:\windows\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) c:\windows\system32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) c:\windows\system32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\system32\ncryptprov.dll \Device\HarddiskVolume3\Windows\System32\ncryptprov.dll (0x00007FFF95FE0000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\ShareHost.dll \Device\HarddiskVolume3\Windows\System32\ShareHost.dll (0x00007FFF90340000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\System32\wshBth.dll \Device\HarddiskVolume3\Windows\System32\wshbth.dll (0x00007FFF920E0000) c:\windows\system32\sbservicetrigger.dll \Device\HarddiskVolume3\Windows\System32\sbservicetrigger.dll (0x00007FFFA8C90000) C:\Windows\System32\Windows.Devices.WiFiDirect.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.WiFiDirect.dll (0x00007FFF8DC70000) c:\windows\system32\wlanapi.dll \Device\HarddiskVolume3\Windows\System32\wlanapi.dll (0x00007FFFA0C00000) c:\windows\system32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\Windows\System32\Windows.Devices.Radios.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Radios.dll (0x00007FFFA0070000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) c:\windows\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) 6796: Explorer.EXE C:\WINDOWS\Explorer.EXE \Device\HarddiskVolume3\Windows\explorer.exe (0x00007FF656970000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) C:\WINDOWS\SYSTEM32\AEPIC.dll \Device\HarddiskVolume3\Windows\System32\aepic.dll (0x00007FFF95AB0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\WININET.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll (0x00007FFF9E110000) C:\WINDOWS\SYSTEM32\UxTheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\mscms.dll \Device\HarddiskVolume3\Windows\System32\mscms.dll (0x00007FFFA0D70000) C:\WINDOWS\SYSTEM32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\NInput.dll \Device\HarddiskVolume3\Windows\System32\ninput.dll (0x00007FFF91B60000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.dll (0x00007FFF91BF0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\appresolver.dll \Device\HarddiskVolume3\Windows\System32\AppResolver.dll (0x00007FFF8E400000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\SYSTEM32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\Windows\System32\StartTileData.dll \Device\HarddiskVolume3\Windows\System32\StartTileData.dll (0x00007FFF8D600000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\languageoverlayutil.dll \Device\HarddiskVolume3\Windows\System32\LanguageOverlayUtil.dll (0x00007FFF9A980000) C:\Windows\System32\Windows.CloudStore.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.dll (0x00007FFF940D0000) C:\Windows\System32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\Windows.StateRepositoryClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\AppExtension.dll \Device\HarddiskVolume3\Windows\System32\AppExtension.dll (0x00007FFF91B10000) C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.Schema.Shell.dll (0x00007FFF8DB70000) C:\WINDOWS\System32\IDStore.dll \Device\HarddiskVolume3\Windows\System32\IDStore.dll (0x00007FFF971E0000) C:\WINDOWS\System32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\wlidprov.dll \Device\HarddiskVolume3\Windows\System32\wlidprov.dll (0x00007FFF94020000) C:\Windows\System32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\Windows\System32\DMCmnUtils.dll \Device\HarddiskVolume3\Windows\System32\dmcmnutils.dll (0x00007FFF8E6E0000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\Taskbar.dll \Device\HarddiskVolume3\Windows\System32\Taskbar.dll (0x00007FFF8C7F0000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\Windows\System32\TWINAPI.dll \Device\HarddiskVolume3\Windows\System32\twinapi.dll (0x00007FFF92110000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\SndVolSSO.DLL \Device\HarddiskVolume3\Windows\System32\SndVolSSO.dll (0x00007FFF8C710000) C:\WINDOWS\SYSTEM32\MMDevAPI.DLL \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll (0x00007FFFA0200000) C:\WINDOWS\SYSTEM32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\rdpendp.dll \Device\HarddiskVolume3\Windows\System32\rdpendp.dll (0x00007FFFA8E30000) C:\Windows\System32\OLEACC.dll \Device\HarddiskVolume3\Windows\System32\oleacc.dll (0x00007FFF8C590000) C:\WINDOWS\system32\explorerframe.dll \Device\HarddiskVolume3\Windows\System32\ExplorerFrame.dll (0x00007FFF8C2C0000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\Windows\System32\SettingsHandlers_DesktopTaskbar.dll \Device\HarddiskVolume3\Windows\System32\SettingsHandlers_DesktopTaskbar.dll (0x00007FFF8C1B0000) C:\Windows\System32\windowscodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\Windows\System32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\Windows\System32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\system32\dataexchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\WINDOWS\system32\twinui.pcshell.dll \Device\HarddiskVolume3\Windows\System32\twinui.pcshell.dll (0x00007FFF8EF80000) C:\WINDOWS\system32\wincorlib.DLL \Device\HarddiskVolume3\Windows\System32\wincorlib.dll (0x00007FFF9AAE0000) C:\WINDOWS\system32\UIAutomationCore.DLL \Device\HarddiskVolume3\Windows\System32\UIAutomationCore.dll (0x00007FFF8EB40000) C:\Windows\System32\windows.immersiveshell.serviceprovider.dll \Device\HarddiskVolume3\Windows\System32\windows.immersiveshell.serviceprovider.dll (0x00007FFF8C0B0000) C:\WINDOWS\System32\twinui.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinui.appcore.dll (0x00007FFF901C0000) C:\WINDOWS\system32\twinui.dll \Device\HarddiskVolume3\Windows\System32\twinui.dll (0x00007FFF8BBB0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\System32\FlightSettings.dll \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll (0x00007FFF9A750000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\cldapi.dll \Device\HarddiskVolume3\Windows\System32\cldapi.dll (0x00007FFF8BB70000) C:\WINDOWS\SYSTEM32\FLTLIB.DLL \Device\HarddiskVolume3\Windows\System32\fltLib.dll (0x00007FFFA8A70000) C:\WINDOWS\SYSTEM32\Wldp.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll (0x00007FFFA9960000) C:\WINDOWS\SYSTEM32\sppc.dll \Device\HarddiskVolume3\Windows\System32\sppc.dll (0x00007FFFA3360000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\WINDOWS\SYSTEM32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\System32\ApplicationFrame.dll \Device\HarddiskVolume3\Windows\System32\ApplicationFrame.dll (0x00007FFF8A740000) C:\Windows\System32\windowmanagementapi.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\system32\Windows.Internal.ShellCommon.dll \Device\HarddiskVolume3\Windows\System32\Windows.Internal.ShellCommon.dll (0x00007FFF8A660000) C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll \Device\HarddiskVolume3\Windows\System32\PhotoMetadataHandler.dll (0x00007FFF973A0000) C:\WINDOWS\system32\activationclient.dll \Device\HarddiskVolume3\Windows\System32\ActivationClient.dll (0x00007FFF8E930000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\ntshrui.dll \Device\HarddiskVolume3\Windows\System32\ntshrui.dll (0x00007FFF8A560000) C:\WINDOWS\SYSTEM32\cscapi.dll \Device\HarddiskVolume3\Windows\System32\cscapi.dll (0x00007FFF923B0000) C:\Windows\System32\AboveLockAppHost.dll \Device\HarddiskVolume3\Windows\System32\AboveLockAppHost.dll (0x00007FFF8A4F0000) C:\Windows\System32\thumbcache.dll \Device\HarddiskVolume3\Windows\System32\thumbcache.dll (0x00007FFF8A470000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\Windows\System32\Windows.UI.Core.TextInput.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Core.TextInput.dll (0x00007FFF94C50000) C:\Windows\System32\Windows.Shell.BlueLightReduction.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.BlueLightReduction.dll (0x00007FFF89B60000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\Windows\System32\TileDataRepository.dll \Device\HarddiskVolume3\Windows\System32\TileDataRepository.dll (0x00007FFF8E540000) C:\Windows\System32\StateRepository.Core.dll \Device\HarddiskVolume3\Windows\System32\StateRepository.Core.dll (0x00007FFF9C5B0000) C:\Windows\System32\Windows.StateRepository.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepository.dll (0x00007FFF9C870000) C:\WINDOWS\SYSTEM32\LINKINFO.dll \Device\HarddiskVolume3\Windows\System32\linkinfo.dll (0x00007FFF91AB0000) C:\WINDOWS\System32\SyncCenter.dll \Device\HarddiskVolume3\Windows\System32\SyncCenter.dll (0x00007FFF89AD0000) C:\Windows\System32\Windows.FileExplorer.Common.dll \Device\HarddiskVolume3\Windows\System32\Windows.FileExplorer.Common.dll (0x00007FFF89A00000) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.FileExplorer.dll (0x00007FFF89870000) C:\WINDOWS\system32\WinUICohabitation.dll \Device\HarddiskVolume3\Windows\System32\WinUICohabitation.dll (0x00007FFF8E510000) C:\WINDOWS\SYSTEM32\cdp.dll \Device\HarddiskVolume3\Windows\System32\cdp.dll (0x00007FFF912B0000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\Windows.Internal.UI.Shell.WindowTabManager.dll \Device\HarddiskVolume3\Windows\System32\Windows.Internal.UI.Shell.WindowTabManager.dll (0x00007FFF89800000) C:\WINDOWS\SYSTEM32\mfplat.dll \Device\HarddiskVolume3\Windows\System32\mfplat.dll (0x00007FFF97630000) C:\WINDOWS\SYSTEM32\RTWorkQ.DLL \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll (0x00007FFF975E0000) C:\Windows\System32\NotificationControllerPS.dll \Device\HarddiskVolume3\Windows\System32\NotificationControllerPS.dll (0x00007FFF8CFA0000) C:\Windows\System32\ActXPrxy.dll \Device\HarddiskVolume3\Windows\System32\actxprxy.dll (0x00007FFF89770000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\PCShellCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\PCShellCommonProxyStub.dll (0x00007FFF8E4E0000) C:\WINDOWS\SYSTEM32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\Windows\System32\Windows.UI.Accessibility.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Accessibility.dll (0x00007FFF89700000) C:\Windows\System32\SwitcherDataModel.dll \Device\HarddiskVolume3\Windows\System32\SwitcherDataModel.dll (0x00007FFF896D0000) C:\WINDOWS\SYSTEM32\daxexec.dll \Device\HarddiskVolume3\Windows\System32\daxexec.dll (0x00007FFF900A0000) C:\WINDOWS\System32\container.dll \Device\HarddiskVolume3\Windows\System32\container.dll (0x00007FFF90040000) C:\WINDOWS\SYSTEM32\omadmapi.dll \Device\HarddiskVolume3\Windows\System32\omadmapi.dll (0x00007FFFAA100000) C:\Windows\System32\CloudExperienceHostCommon.dll \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostCommon.dll (0x00007FFF91060000) C:\WINDOWS\SYSTEM32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\SYSTEM32\cryptngc.dll \Device\HarddiskVolume3\Windows\System32\cryptngc.dll (0x00007FFF92440000) C:\WINDOWS\SYSTEM32\dmEnrollEngine.DLL \Device\HarddiskVolume3\Windows\System32\dmenrollengine.dll (0x00007FFF895C0000) C:\WINDOWS\SYSTEM32\cflapi.dll \Device\HarddiskVolume3\Windows\System32\cflapi.dll (0x00007FFF89570000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\CloudExperienceHostRedirection.dll \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostRedirection.dll (0x00007FFF89530000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\UserSetup.Eligibility.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\UserSetup.Eligibility.dll (0x00007FFF89490000) C:\WINDOWS\SYSTEM32\clipc.dll \Device\HarddiskVolume3\Windows\System32\Clipc.dll (0x00007FFF8CEA0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\MSVCP140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll (0x00007FFF8C760000) C:\WINDOWS\SYSTEM32\NETAPI32.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll (0x00007FFF95F70000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll (0x00007FFF920C0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll (0x00007FFF9E3A0000) C:\WINDOWS\SYSTEM32\WKSCLI.DLL \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\Windows\System32\Windows.Management.InprocObjects.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.InprocObjects.dll (0x00007FFF89430000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncShell64.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncShell64.dll (0x00007FFF88170000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\VERSION.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\SYSTEM32\Secur32.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll (0x00007FFFA74F0000) C:\Windows\System32\EhStorShell.dll \Device\HarddiskVolume3\Windows\System32\EhStorShell.dll (0x00007FFF877C0000) C:\WINDOWS\System32\SETUPAPI.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\System32\cscui.dll \Device\HarddiskVolume3\Windows\System32\cscui.dll (0x00007FFF87680000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\Windows\System32\Windows.Gaming.Input.dll \Device\HarddiskVolume3\Windows\System32\Windows.Gaming.Input.dll (0x00007FFFA1AB0000) C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll (0x00007FFFA7330000) C:\WINDOWS\system32\CloudRestoreLauncher.dll \Device\HarddiskVolume3\Windows\System32\CloudRestoreLauncher.dll (0x00007FFF85DE0000) C:\WINDOWS\system32\stobject.dll \Device\HarddiskVolume3\Windows\System32\stobject.dll (0x00007FFF85D70000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\WINDOWS\system32\BatMeter.dll \Device\HarddiskVolume3\Windows\System32\batmeter.dll (0x00007FFF85D40000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) C:\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll (0x00007FFF85CD0000) C:\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll (0x00007FFF859F0000) C:\Windows\ShellExperiences\TileControl.dll \Device\HarddiskVolume3\Windows\ShellExperiences\TileControl.dll (0x00007FFF858F0000) C:\Windows\ShellComponents\WindowsInternal.ShellUI.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ShellUI.dll (0x00007FFF858C0000) C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll (0x00007FFF8D020000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\WINDOWS\system32\WMICLNT.dll \Device\HarddiskVolume3\Windows\System32\wmiclnt.dll (0x00007FFFA38E0000) C:\WINDOWS\system32\es.dll \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\system32\prnfldr.dll \Device\HarddiskVolume3\Windows\System32\prnfldr.dll (0x00007FFF85800000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\SYSTEM32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\WINDOWS\SYSTEM32\atlthunk.dll \Device\HarddiskVolume3\Windows\System32\atlthunk.dll (0x00007FFF9AA50000) C:\WINDOWS\System32\Actioncenter.dll \Device\HarddiskVolume3\Windows\System32\ActionCenter.dll (0x00007FFF865F0000) C:\WINDOWS\system32\dxp.dll \Device\HarddiskVolume3\Windows\System32\DXP.dll (0x00007FFF86570000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\Taskbar.View.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\Taskbar.View.dll (0x00007FFF84DB0000) C:\WINDOWS\SYSTEM32\MFSENSORGROUP.dll \Device\HarddiskVolume3\Windows\System32\mfsensorgroup.dll (0x00007FFF94FC0000) C:\WINDOWS\system32\Syncreg.dll \Device\HarddiskVolume3\Windows\System32\Syncreg.dll (0x00007FFF86340000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\system32\wpdshserviceobj.dll \Device\HarddiskVolume3\Windows\System32\WPDShServiceObj.dll (0x00007FFF84090000) C:\Windows\System32\PortableDeviceTypes.dll \Device\HarddiskVolume3\Windows\System32\PortableDeviceTypes.dll (0x00007FFF84050000) C:\Windows\System32\PortableDeviceApi.dll \Device\HarddiskVolume3\Windows\System32\PortableDeviceApi.dll (0x00007FFFA2180000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\cscobj.dll \Device\HarddiskVolume3\Windows\System32\cscobj.dll (0x00007FFF838C0000) C:\Windows\System32\ieframe.dll \Device\HarddiskVolume3\Windows\System32\ieframe.dll (0x00007FFF83920000) C:\WINDOWS\SYSTEM32\msIso.dll \Device\HarddiskVolume3\Windows\System32\msIso.dll (0x00007FFF83870000) C:\WINDOWS\System32\srchadmin.dll \Device\HarddiskVolume3\Windows\System32\srchadmin.dll (0x00007FFF83810000) C:\Windows\System32\Windows.Devices.Sensors.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Sensors.dll (0x00007FFF97FA0000) C:\Windows\System32\shdocvw.dll \Device\HarddiskVolume3\Windows\System32\shdocvw.dll (0x00007FFF83330000) C:\Windows\System32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\SYSTEM32\MLANG.dll \Device\HarddiskVolume3\Windows\System32\mlang.dll (0x00007FFF832E0000) C:\Windows\System32\imapi2.dll \Device\HarddiskVolume3\Windows\System32\imapi2.dll (0x00007FFF82CF0000) C:\Windows\System32\CapabilityAccessManagerClient.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManagerClient.dll (0x00007FFF86C40000) C:\Windows\System32\AudioSes.dll \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\Windows\System32\Windows.Media.Devices.dll \Device\HarddiskVolume3\Windows\System32\Windows.Media.Devices.dll (0x00007FFF82DF0000) C:\Windows\System32\Windows.Devices.Enumeration.dll \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Enumeration.dll (0x00007FFF82C30000) C:\Windows\System32\InputSwitch.dll \Device\HarddiskVolume3\Windows\System32\InputSwitch.dll (0x00007FFF94DC0000) C:\WINDOWS\System32\MSWB7.dll \Device\HarddiskVolume3\Windows\System32\MSWB7.dll (0x00007FFF82DA0000) C:\Windows\System32\NetworkIcon.dll \Device\HarddiskVolume3\Windows\System32\NetworkIcon.dll (0x00007FFF9FC40000) C:\Windows\System32\Windows.Energy.dll \Device\HarddiskVolume3\Windows\System32\Windows.Energy.dll (0x00007FFF8C640000) C:\Windows\System32\NetworkUXBroker.dll \Device\HarddiskVolume3\Windows\System32\NetworkUXBroker.dll (0x00007FFF9F6C0000) C:\Windows\System32\DAMediaManager.dll \Device\HarddiskVolume3\Windows\System32\DAMediaManager.dll (0x00007FFF9FFA0000) C:\Windows\System32\EthernetMediaManager.dll \Device\HarddiskVolume3\Windows\System32\EthernetMediaManager.dll (0x00007FFF9F520000) C:\Windows\System32\NcaApi.dll \Device\HarddiskVolume3\Windows\System32\NcaApi.dll (0x00007FFF9FF90000) C:\Windows\System32\dot3api.dll \Device\HarddiskVolume3\Windows\System32\dot3api.dll (0x00007FFF9F690000) C:\Windows\System32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\Windows\System32\DevDispItemProvider.dll \Device\HarddiskVolume3\Windows\System32\DevDispItemProvider.dll (0x00007FFF82C00000) C:\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\Windows\System32\wpnclient.dll \Device\HarddiskVolume3\Windows\System32\wpnclient.dll (0x00007FFF82AE0000) C:\Windows\System32\CompPkgSup.DLL \Device\HarddiskVolume3\Windows\System32\CompPkgSup.dll (0x00007FFF82B60000) C:\Windows\System32\bthprops.cpl \Device\HarddiskVolume3\Windows\System32\bthprops.cpl (0x00007FFF824F0000) C:\WINDOWS\SYSTEM32\bluetoothapis.dll \Device\HarddiskVolume3\Windows\System32\BluetoothApis.dll (0x00007FFF9FEB0000) C:\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll (0x00007FFF9F160000) C:\WINDOWS\system32\authui.dll \Device\HarddiskVolume3\Windows\System32\authui.dll (0x00007FFF823A0000) C:\WINDOWS\system32\CredProvCommonCore.DLL \Device\HarddiskVolume3\Windows\System32\CredProvCommonCore.dll (0x00007FFFA6A00000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\WINDOWS\SYSTEM32\profext.dll \Device\HarddiskVolume3\Windows\System32\profext.dll (0x00007FFFA8140000) C:\Windows\System32\WinLangdb.dll \Device\HarddiskVolume3\Windows\System32\Winlangdb.dll (0x00007FFF81E00000) C:\WINDOWS\SYSTEM32\virtdisk.dll \Device\HarddiskVolume3\Windows\System32\virtdisk.dll (0x00007FFF84A60000) C:\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll (0x00007FFF81D80000) C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\imagehlp.dll \Device\HarddiskVolume3\Windows\System32\imagehlp.dll (0x00007FFFAC000000) C:\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll (0x00007FFF85970000) C:\WINDOWS\system32\mssprxy.dll \Device\HarddiskVolume3\Windows\System32\mssprxy.dll (0x00007FFF661D0000) C:\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll (0x00007FFF90460000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll (0x00007FFF658D0000) C:\WINDOWS\system32\zipfldr.dll \Device\HarddiskVolume3\Windows\System32\zipfldr.dll (0x00007FFF657E0000) C:\WINDOWS\system32\archiveint.dll \Device\HarddiskVolume3\Windows\System32\archiveint.dll (0x00007FFF65670000) C:\WINDOWS\system32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\SYSTEM32\DUI70.dll \Device\HarddiskVolume3\Windows\System32\dui70.dll (0x00007FFF654B0000) C:\WINDOWS\SYSTEM32\DUser.dll \Device\HarddiskVolume3\Windows\System32\duser.dll (0x00007FFF65400000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll (0x00007FFF8A990000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll (0x00007FFF8AB20000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.FrameworkUdk.System.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.FrameworkUdk.System.dll (0x00007FFF8A800000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll (0x00007FFF8A710000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.ui.xaml.dll (0x00007FFF8AC00000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll (0x00007FFF8AAA0000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll (0x00007FFF9B310000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll (0x00007FFF89BE0000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll (0x00007FFF8A440000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll (0x00007FFF8A3F0000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\dcompi.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\dcompi.dll (0x00007FFF65230000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll (0x00007FFF6D280000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\dwmcorei.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\dwmcorei.dll (0x00007FFF64F40000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\marshal.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\marshal.dll (0x00007FFF64EB0000) C:\WINDOWS\SYSTEM32\D3DCOMPILER_47.dll \Device\HarddiskVolume3\Windows\System32\D3DCompiler_47.dll (0x00007FFFA4F70000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.InputStateManager.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.InputStateManager.dll (0x00007FFF64E30000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Input.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Input.dll (0x00007FFF64CC0000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.dll (0x00007FFF64C40000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight.dll (0x00007FFF64B60000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\FileExplorerExtensions.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\FileExplorerExtensions.dll (0x00007FFF64670000) C:\WINDOWS\System32\shacct.dll \Device\HarddiskVolume3\Windows\System32\shacct.dll (0x00007FFFA4B80000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll (0x00007FFF86E70000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\gdiplus.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\GdiPlus.dll (0x00007FFF8DE50000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.DirectManipulation.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.DirectManipulation.dll (0x00007FFF645A0000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\wuceffectsi.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\wuceffectsi.dll (0x00007FFF64420000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll (0x00007FFF64330000) C:\WINDOWS\SYSTEM32\MPR.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll (0x00007FFF9D370000) C:\WINDOWS\SYSTEM32\Cabinet.dll \Device\HarddiskVolume3\Windows\System32\cabinet.dll (0x00007FFF878B0000) C:\Windows\System32\dlnashext.dll \Device\HarddiskVolume3\Windows\System32\dlnashext.dll (0x00007FFF64250000) C:\Windows\System32\PlayToDevice.dll \Device\HarddiskVolume3\Windows\System32\PlayToDevice.dll (0x00007FFF641F0000) C:\WINDOWS\system32\wpdshext.dll \Device\HarddiskVolume3\Windows\System32\wpdshext.dll (0x00007FFF64140000) C:\Windows\System32\EhStorAPI.dll \Device\HarddiskVolume3\Windows\System32\EhStorAPI.dll (0x00007FFF64110000) C:\WINDOWS\SYSTEM32\pcacli.dll \Device\HarddiskVolume3\Windows\System32\pcacli.dll (0x00007FFFA8BE0000) C:\WINDOWS\System32\sfc_os.dll \Device\HarddiskVolume3\Windows\System32\sfc_os.dll (0x00007FFF9F660000) C:\WINDOWS\SYSTEM32\ServicingCommon.dll \Device\HarddiskVolume3\Windows\System32\ServicingCommon.dll (0x00007FFFAA620000) 6860: ShellHost.exe C:\Windows\System32\ShellHost.exe \Device\HarddiskVolume3\Windows\System32\ShellHost.exe (0x00007FF65BA10000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\Windows\System32\ControlCenter.dll \Device\HarddiskVolume3\Windows\System32\ControlCenter.dll (0x00007FFF8E040000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\Windows\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\WINDOWS\SYSTEM32\languageoverlayutil.dll \Device\HarddiskVolume3\Windows\System32\LanguageOverlayUtil.dll (0x00007FFF9A980000) C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll (0x00007FFF8D020000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\Windows\System32\WindowManagementAPI.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\Windows\System32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\Windows\System32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\system32\DataExchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\Windows\System32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\Windows\System32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\WINDOWS\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) 7096: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\appinfo.dll \Device\HarddiskVolume3\Windows\System32\appinfo.dll (0x00007FFF8CBF0000) C:\WINDOWS\SYSTEM32\appinfoext.dll \Device\HarddiskVolume3\Windows\System32\appinfoext.dll (0x00007FFF9F4F0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\SYSTEM32\daxexec.dll \Device\HarddiskVolume3\Windows\System32\daxexec.dll (0x00007FFF900A0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\container.dll \Device\HarddiskVolume3\Windows\System32\container.dll (0x00007FFF90040000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\AppXAllUserStore.dll \Device\HarddiskVolume3\Windows\System32\AppxAllUserStore.dll (0x00007FFFA9BB0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\licensemanagerapi.dll \Device\HarddiskVolume3\Windows\System32\LicenseManagerApi.dll (0x00007FFF90BC0000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) c:\windows\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\system32\Bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) c:\windows\system32\Wldp.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll (0x00007FFFA9960000) 7116: SppExtComObj.exe C:\WINDOWS\system32\SppExtComObj.exe \Device\HarddiskVolume3\Windows\System32\SppExtComObj.Exe (0x00007FF65BF80000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\system32\ACTIVEDS.dll \Device\HarddiskVolume3\Windows\System32\activeds.dll (0x00007FFF8CBA0000) C:\WINDOWS\system32\logoncli.dll \Device\HarddiskVolume3\Windows\System32\logoncli.dll (0x00007FFFA9360000) C:\WINDOWS\system32\adsldpc.dll \Device\HarddiskVolume3\Windows\System32\adsldpc.dll (0x00007FFF8CB50000) C:\WINDOWS\System32\WLDAP32.dll \Device\HarddiskVolume3\Windows\System32\Wldap32.dll (0x00007FFFABAD0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\adsldp.dll \Device\HarddiskVolume3\Windows\System32\adsldp.dll (0x00007FFF8A610000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) C:\WINDOWS\system32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) 6156: CrossDeviceResume.exe C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe (0x00007FF740CF0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll (0x00007FFF9E3A0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MSVCP140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll (0x00007FFF8C760000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll (0x00007FFF920C0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResumeView.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResumeView.dll (0x00007FFF8C230000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\system32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.ui.xaml.dll (0x00007FFF8AC00000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll (0x00007FFF8AB20000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll (0x00007FFF8AAA0000) C:\WINDOWS\SYSTEM32\DWrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\VERSION.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll (0x00007FFF8A990000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\SYSTEM32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.FrameworkUdk.System.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.FrameworkUdk.System.dll (0x00007FFF8A800000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll (0x00007FFF8A710000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll (0x00007FFF9B310000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\WINDOWS\SYSTEM32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll (0x00007FFF8A440000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll (0x00007FFF8A3F0000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll (0x00007FFF89BE0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) 6968: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\cbdhsvc.dll \Device\HarddiskVolume3\Windows\System32\CBDHSvc.dll (0x00007FFF8BA80000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\Windows\System32\windows.applicationmodel.datatransfer.dll \Device\HarddiskVolume3\Windows\System32\windows.applicationmodel.datatransfer.dll (0x00007FFF8A8C0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) c:\windows\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) c:\windows\system32\cdp.dll \Device\HarddiskVolume3\Windows\System32\cdp.dll (0x00007FFF912B0000) c:\windows\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\appresolver.dll \Device\HarddiskVolume3\Windows\System32\AppResolver.dll (0x00007FFF8E400000) C:\Windows\System32\Windows.Storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\Windows\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) 7236: MicrosoftEdgeUpdate.exe (WOW) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (0x0000000000E40000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ntdll.dll (0x0000000077290000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\SysWOW64\kernel32.dll (0x00000000761C0000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\SysWOW64\KernelBase.dll (0x0000000075370000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\SysWOW64\ole32.dll (0x0000000075B50000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\SysWOW64\msvcp_win.dll (0x0000000076BC0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase.dll (0x0000000076980000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\SysWOW64\gdi32.dll (0x00000000766F0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\SysWOW64\win32u.dll (0x00000000762C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\SysWOW64\gdi32full.dll (0x00000000762E0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\SysWOW64\user32.dll (0x0000000075970000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\SysWOW64\combase.dll (0x00000000756E0000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\SysWOW64\rpcrt4.dll (0x00000000768C0000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\SysWOW64\shell32.dll (0x0000000076C50000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\SysWOW64\WinTypes.dll (0x0000000074F30000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\SysWOW64\windows.storage.dll (0x0000000074610000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\SysWOW64\advapi32.dll (0x0000000076AA0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\SysWOW64\msvcrt.dll (0x00000000752A0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\SysWOW64\sechost.dll (0x0000000076B30000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\SysWOW64\SHCore.dll (0x0000000074CF0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\shlwapi.dll (0x0000000076500000) C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.207.5\msedgeupdate.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\1.3.207.5\msedgeupdate.dll (0x00000000743D0000) C:\WINDOWS\SYSTEM32\NETAPI32.dll \Device\HarddiskVolume3\Windows\SysWOW64\netapi32.dll (0x00000000743B0000) C:\WINDOWS\SYSTEM32\VERSION.dll \Device\HarddiskVolume3\Windows\SysWOW64\version.dll (0x00000000743A0000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\SysWOW64\wtsapi32.dll (0x0000000074380000) C:\WINDOWS\SYSTEM32\NETUTILS.DLL \Device\HarddiskVolume3\Windows\SysWOW64\netutils.dll (0x0000000074370000) C:\WINDOWS\SYSTEM32\WKSCLI.DLL \Device\HarddiskVolume3\Windows\SysWOW64\wkscli.dll (0x0000000074350000) C:\WINDOWS\SYSTEM32\DSREG.DLL \Device\HarddiskVolume3\Windows\SysWOW64\dsreg.dll (0x0000000074210000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\SysWOW64\userenv.dll (0x00000000741E0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\SysWOW64\crypt32.dll (0x0000000075040000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\profapi.dll (0x00000000741C0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\SysWOW64\kernel.appcore.dll (0x00000000741A0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcryptprimitives.dll (0x00000000763E0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\SysWOW64\winsta.dll (0x0000000074140000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\SysWOW64\clbcatq.dll (0x0000000074DD0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\SysWOW64\taskschd.dll (0x00000000740B0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\SysWOW64\oleaut32.dll (0x0000000076110000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\SysWOW64\sspicli.dll (0x0000000074080000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\SysWOW64\cryptbase.dll (0x0000000073FC0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\wow64.dll \Device\HarddiskVolume3\Windows\System32\wow64.dll (0x00007FFFAD770000) C:\WINDOWS\System32\wow64base.dll \Device\HarddiskVolume3\Windows\System32\wow64base.dll (0x00007FFFABBF0000) C:\WINDOWS\System32\wow64win.dll \Device\HarddiskVolume3\Windows\System32\wow64win.dll (0x00007FFFAC150000) C:\WINDOWS\System32\wow64con.dll \Device\HarddiskVolume3\Windows\System32\wow64con.dll (0x00007FFFABBD0000) C:\WINDOWS\System32\wow64cpu.dll \Device\HarddiskVolume3\Windows\System32\wow64cpu.dll (0x0000000077280000) 7536: SearchHost.exe C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe (0x00007FF7547C0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vccorlib140_app.DLL \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vccorlib140_app.dll (0x00007FFF893D0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll (0x00007FFF9E3A0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll (0x00007FFF920C0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MSVCP140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll (0x00007FFF8C760000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.UI.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.UI.dll (0x00007FFF88870000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\SYSTEM32\uiautomationcore.dll \Device\HarddiskVolume3\Windows\System32\UIAutomationCore.dll (0x00007FFF8EB40000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.InternalWebApi.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.InternalWebApi.dll (0x00007FFF878E0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\Cabinet.dll \Device\HarddiskVolume3\Windows\System32\cabinet.dll (0x00007FFF878B0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll (0x00007FFF87800000) C:\WINDOWS\SYSTEM32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\Windows.Storage.ApplicationData.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll (0x00007FFF87750000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\WINDOWS\SYSTEM32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\Windows\System32\Windows.Web.Http.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.Http.dll (0x00007FFF87520000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\SYSTEM32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\FlightSettings.dll \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll (0x00007FFF9A750000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll (0x00007FFF9FBB0000) C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll (0x00007FFF9AC80000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\WINDOWS\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\SYSTEM32\RMCLIENT.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\profext.dll \Device\HarddiskVolume3\Windows\System32\profext.dll (0x00007FFFA8140000) C:\WINDOWS\SYSTEM32\rometadata.dll \Device\HarddiskVolume3\Windows\System32\rometadata.dll (0x00007FFF90300000) C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Core.TextInput.dll (0x00007FFF94C50000) C:\WINDOWS\SYSTEM32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\SYSTEM32\fcon.dll \Device\HarddiskVolume3\Windows\System32\fcon.dll (0x00007FFF9F590000) C:\WINDOWS\system32\DataExchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll (0x00007FFF8D020000) C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll (0x00007FFF9F160000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll (0x00007FFF8EAE0000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\WINDOWS\system32\tquery.dll \Device\HarddiskVolume3\Windows\System32\tquery.dll (0x00007FFF8F9D0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\SearchIndexerCore.dll \Device\HarddiskVolume3\Windows\System32\SearchIndexerCore.dll (0x00007FFF8F8E0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\SYSTEM32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\SYSTEM32\windows.storage.search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\Program Files\Common Files\System\Ole DB\oledb32.dll \Device\HarddiskVolume3\Program Files\Common Files\System\Ole DB\oledb32.dll (0x00007FFF86CC0000) C:\WINDOWS\SYSTEM32\MSDART.DLL \Device\HarddiskVolume3\Windows\System32\msdart.dll (0x00007FFF8C610000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\Comctl32.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\comctl32.dll (0x00007FFF86DB0000) C:\WINDOWS\SYSTEM32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\SYSTEM32\msftedit.dll \Device\HarddiskVolume3\Windows\System32\msftedit.dll (0x00007FFF943F0000) C:\WINDOWS\SYSTEM32\globinputhost.dll \Device\HarddiskVolume3\Windows\System32\globinputhost.dll (0x00007FFF943B0000) C:\Windows\System32\aadWamExtension.dll \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll (0x00007FFF86C00000) C:\Windows\System32\Windows.Globalization.Fontgroups.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.Fontgroups.dll (0x00007FFF90290000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Microsoft.Web.WebView2.Core.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Microsoft.Web.WebView2.Core.dll (0x00007FFF86B30000) C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll \Device\HarddiskVolume3\Windows\System32\fontgroupsoverride.dll (0x00007FFF9AAB0000) C:\Windows\System32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\Windows\System32\twinapi.dll \Device\HarddiskVolume3\Windows\System32\twinapi.dll (0x00007FFF92110000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Model.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Model.dll (0x00007FFF868B0000) C:\Windows\System32\StartTileData.dll \Device\HarddiskVolume3\Windows\System32\StartTileData.dll (0x00007FFF8D600000) C:\WINDOWS\SYSTEM32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\Windows\System32\Windows.CloudStore.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.dll (0x00007FFF940D0000) C:\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll (0x00007FFF8C6A0000) C:\Windows\System32\Windows.UI.Input.Inking.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Input.Inking.dll (0x00007FFF86710000) C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.Schema.Shell.dll (0x00007FFF8DB70000) C:\WINDOWS\SYSTEM32\WININET.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll (0x00007FFF9E110000) C:\Windows\System32\appresolver.dll \Device\HarddiskVolume3\Windows\System32\AppResolver.dll (0x00007FFF8E400000) C:\Windows\System32\TileDataRepository.dll \Device\HarddiskVolume3\Windows\System32\TileDataRepository.dll (0x00007FFF8E540000) C:\WINDOWS\SYSTEM32\StateRepository.Core.dll \Device\HarddiskVolume3\Windows\System32\StateRepository.Core.dll (0x00007FFF9C5B0000) C:\WINDOWS\SYSTEM32\Windows.StateRepository.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepository.dll (0x00007FFF9C870000) C:\WINDOWS\SYSTEM32\wuceffects.dll \Device\HarddiskVolume3\Windows\System32\wuceffects.dll (0x00007FFF866B0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll (0x00007FFF9AD70000) C:\WINDOWS\SYSTEM32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\Windows\System32\CryptoWinRT.dll \Device\HarddiskVolume3\Windows\System32\CryptoWinRT.dll (0x00007FFF86650000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\omadmapi.dll \Device\HarddiskVolume3\Windows\System32\omadmapi.dll (0x00007FFFAA100000) C:\Windows\SystemApps\Shared\WebView2SDK\WebView2Standalone.dll \Device\HarddiskVolume3\Windows\SystemApps\Shared\WebView2SDK\webview2standalone.dll (0x00007FFF82F30000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\EBWebView\x64\EmbeddedBrowserWebView.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\EBWebView\x64\EmbeddedBrowserWebView.dll (0x00007FFF82540000) C:\WINDOWS\SYSTEM32\VERSION.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\system32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\wv2winrt.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\wv2winrt.dll (0x00007FFF6EF70000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll (0x00007FFF90460000) C:\Windows\System32\windows.applicationmodel.datatransfer.dll \Device\HarddiskVolume3\Windows\System32\windows.applicationmodel.datatransfer.dll (0x00007FFF8A8C0000) 7544: StartMenuExperienceHost.exe C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (0x00007FF662D20000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\wincorlib.DLL \Device\HarddiskVolume3\Windows\System32\wincorlib.dll (0x00007FFF9AAE0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll (0x00007FFF8D020000) C:\WINDOWS\SYSTEM32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartDocked.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartDocked.dll (0x00007FFF88440000) C:\WINDOWS\SYSTEM32\StartTileData.dll \Device\HarddiskVolume3\Windows\System32\StartTileData.dll (0x00007FFF8D600000) C:\WINDOWS\SYSTEM32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) C:\WINDOWS\SYSTEM32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll \Device\HarddiskVolume3\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll (0x00007FFF88140000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\languageoverlayutil.dll \Device\HarddiskVolume3\Windows\System32\LanguageOverlayUtil.dll (0x00007FFF9A980000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\WINDOWS\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\SYSTEM32\RMCLIENT.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Core.TextInput.dll (0x00007FFF94C50000) C:\WINDOWS\SYSTEM32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\WINDOWS\system32\DataExchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\Windows\System32\Windows.Storage.ApplicationData.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll (0x00007FFF87750000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\Windows\System32\Windows.CloudStore.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.dll (0x00007FFF940D0000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll \Device\HarddiskVolume3\Windows\System32\Windows.CloudStore.Schema.Shell.dll (0x00007FFF8DB70000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\WINDOWS\SYSTEM32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\Windows\System32\appresolver.dll \Device\HarddiskVolume3\Windows\System32\AppResolver.dll (0x00007FFF8E400000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll (0x00007FFF86E70000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\SYSTEM32\SLC.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll (0x00007FFF920C0000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\COMCTL32.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\comctl32.dll (0x00007FFF86DB0000) C:\WINDOWS\SYSTEM32\Secur32.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll (0x00007FFFA74F0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\MSVCP140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll (0x00007FFF8C760000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll (0x00007FFF9E3A0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\SSPICLI.DLL \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll (0x00007FFF8C6A0000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\Windows\System32\TileDataRepository.dll \Device\HarddiskVolume3\Windows\System32\TileDataRepository.dll (0x00007FFF8E540000) C:\WINDOWS\SYSTEM32\StateRepository.Core.dll \Device\HarddiskVolume3\Windows\System32\StateRepository.Core.dll (0x00007FFF9C5B0000) C:\WINDOWS\SYSTEM32\Windows.StateRepository.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepository.dll (0x00007FFF9C870000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\SYSTEM32\omadmapi.dll \Device\HarddiskVolume3\Windows\System32\omadmapi.dll (0x00007FFFAA100000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\Windows\System32\Windows.Globalization.Fontgroups.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.Fontgroups.dll (0x00007FFF90290000) C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll \Device\HarddiskVolume3\Windows\System32\fontgroupsoverride.dll (0x00007FFF9AAB0000) C:\Windows\System32\windows.internal.shell.broker.dll \Device\HarddiskVolume3\Windows\System32\Windows.Internal.Shell.Broker.dll (0x00007FFF86A40000) C:\WINDOWS\system32\twinapi.dll \Device\HarddiskVolume3\Windows\System32\twinapi.dll (0x00007FFF92110000) C:\WINDOWS\SYSTEM32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\windowscodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll (0x00007FFF9F160000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\Windows\System32\CryptoWinRT.dll \Device\HarddiskVolume3\Windows\System32\CryptoWinRT.dll (0x00007FFF86650000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\Windows.Energy.dll \Device\HarddiskVolume3\Windows\System32\Windows.Energy.dll (0x00007FFF8C640000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll (0x00007FFF85970000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll (0x00007FFF864C0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll (0x00007FFF84AA0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll (0x00007FFF86230000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll (0x00007FFF861D0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) C:\WINDOWS\SYSTEM32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Clipboard.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Clipboard.dll (0x00007FFF84A00000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ux-phui.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ux-phui.dll (0x00007FFF84920000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ReactNativeXaml.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ReactNativeXaml.dll (0x00007FFF847B0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTTurboModule.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTTurboModule.dll (0x00007FFF840B0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll (0x00007FFF85850000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\hermes.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\hermes.dll (0x00007FFF833D0000) C:\WINDOWS\SYSTEM32\icuuc.dll \Device\HarddiskVolume3\Windows\System32\icuuc.dll (0x000001A667FF0000) C:\WINDOWS\SYSTEM32\icuin.dll \Device\HarddiskVolume3\Windows\System32\icuin.dll (0x000001A669B50000) C:\WINDOWS\SYSTEM32\icu.DLL \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\Windows\System32\Windows.Web.Http.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.Http.dll (0x00007FFF87520000) C:\Windows\System32\WinRtTracing.dll \Device\HarddiskVolume3\Windows\System32\WinRtTracing.dll (0x00007FFF824B0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll (0x00007FFF81A20000) C:\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll (0x00007FFF9FBB0000) C:\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll (0x00007FFF6FA40000) C:\WINDOWS\SYSTEM32\profext.dll \Device\HarddiskVolume3\Windows\System32\profext.dll (0x00007FFFA8140000) C:\WINDOWS\SYSTEM32\WININET.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll (0x00007FFF9E110000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll (0x00007FFF9AD70000) C:\WINDOWS\SYSTEM32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\SYSTEM32\firewallapi.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\SYSTEM32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\SYSTEM32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) C:\Windows\System32\certenroll.dll \Device\HarddiskVolume3\Windows\System32\CertEnroll.dll (0x00007FFF6E8A0000) C:\WINDOWS\SYSTEM32\certca.dll \Device\HarddiskVolume3\Windows\System32\certca.dll (0x00007FFF6F950000) 7640: Widgets.exe C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe (0x00007FF6347B0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\msvcp140_app.dll (0x00007FFF87490000) C:\WINDOWS\SYSTEM32\NETAPI32.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll (0x00007FFF95F70000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_1_app.dll (0x00007FFF9AC50000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_app.dll (0x00007FFF90490000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\CONCRT140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\concrt140_app.dll (0x00007FFF87440000) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll (0x00007FFF87410000) C:\WINDOWS\SYSTEM32\DSREG.DLL \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\WKSCLI.DLL \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\WINDOWS\SYSTEM32\NETUTILS.DLL \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll (0x00007FFF902E0000) C:\Windows\System32\BiWinrt.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll (0x00007FFF8C6A0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll (0x00007FFF902B0000) C:\Windows\System32\Windows.Energy.dll \Device\HarddiskVolume3\Windows\System32\Windows.Energy.dll (0x00007FFF8C640000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) 7740: RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe (0x00007FF68A5E0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\Windows\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll (0x00007FFF9AC80000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Windows\System32\Windows.UI.Accessibility.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Accessibility.dll (0x00007FFF89700000) C:\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\rometadata.dll \Device\HarddiskVolume3\Windows\System32\rometadata.dll (0x00007FFF90300000) C:\Windows\System32\AppExtension.dll \Device\HarddiskVolume3\Windows\System32\AppExtension.dll (0x00007FFF91B10000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\CapabilityAccessManagerClient.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManagerClient.dll (0x00007FFF86C40000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\Windows\System32\Windows.Internal.System.UserProfile.dll \Device\HarddiskVolume3\Windows\System32\Windows.Internal.System.UserProfile.dll (0x00007FFF8CB10000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\WINDOWS\system32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\system32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll \Device\HarddiskVolume3\Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll (0x00007FFF85FB0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\wincorlib.DLL \Device\HarddiskVolume3\Windows\System32\wincorlib.dll (0x00007FFF9AAE0000) C:\Windows\System32\CloudExperienceHostCommon.dll \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostCommon.dll (0x00007FFF91060000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll (0x00007FFF85850000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll (0x00007FFF9E3A0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll (0x00007FFF920C0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\MSVCP140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll (0x00007FFF8C760000) C:\WINDOWS\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\SYSTEM32\SettingsEnvironment.Desktop.dll \Device\HarddiskVolume3\Windows\System32\SettingsEnvironment.Desktop.dll (0x00007FFF831E0000) C:\WINDOWS\SYSTEM32\webauthn.dll \Device\HarddiskVolume3\Windows\System32\webauthn.dll (0x00007FFFA4280000) C:\WINDOWS\SYSTEM32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) C:\WINDOWS\SYSTEM32\MFSENSORGROUP.dll \Device\HarddiskVolume3\Windows\System32\mfsensorgroup.dll (0x00007FFF94FC0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\DismApi.DLL \Device\HarddiskVolume3\Windows\System32\DismApi.dll (0x00007FFF830A0000) C:\WINDOWS\SYSTEM32\SPPC.DLL \Device\HarddiskVolume3\Windows\System32\sppc.dll (0x00007FFFA3360000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\SYSTEM32\inputhost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\NetworkUXBroker.dll \Device\HarddiskVolume3\Windows\System32\NetworkUXBroker.dll (0x00007FFF9F6C0000) C:\Windows\System32\EthernetMediaManager.dll \Device\HarddiskVolume3\Windows\System32\EthernetMediaManager.dll (0x00007FFF9F520000) C:\Windows\System32\dot3api.dll \Device\HarddiskVolume3\Windows\System32\dot3api.dll (0x00007FFF9F690000) C:\Windows\System32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll (0x00007FFF90460000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) 7764: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\windowsudkservices.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudkservices.shellcommon.dll (0x00007FFF873E0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll (0x00007FFF87800000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll (0x00007FFF9E3A0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MSVCP140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll (0x00007FFF8C760000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll (0x00007FFF920C0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\rometadata.dll \Device\HarddiskVolume3\Windows\System32\rometadata.dll (0x00007FFF90300000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) 7840: RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe (0x00007FF68A5E0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\Windows\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\AppExtension.dll \Device\HarddiskVolume3\Windows\System32\AppExtension.dll (0x00007FFF91B10000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll (0x00007FFF9BD70000) C:\WINDOWS\SYSTEM32\slc.dll \Device\HarddiskVolume3\Windows\System32\slc.dll (0x00007FFFA7F80000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\Windows\System32\Windows.Internal.System.UserProfile.dll \Device\HarddiskVolume3\Windows\System32\Windows.Internal.System.UserProfile.dll (0x00007FFF8CB10000) C:\WINDOWS\system32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll (0x00007FFF872A0000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\Windows\System32\CloudExperienceHostCommon.dll \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostCommon.dll (0x00007FFF91060000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\CapabilityAccessManagerClient.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManagerClient.dll (0x00007FFF86C40000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\DMCmnUtils.dll \Device\HarddiskVolume3\Windows\System32\dmcmnutils.dll (0x00007FFF8E6E0000) C:\Windows\System32\StartTileData.dll \Device\HarddiskVolume3\Windows\System32\StartTileData.dll (0x00007FFF8D600000) C:\Windows\System32\MDMRegistration.DLL \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll (0x00007FFFA9CF0000) C:\WINDOWS\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll (0x00007FFF9AC80000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\System32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\FlightSettings.dll \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll (0x00007FFF9A750000) C:\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll (0x00007FFF9FBB0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\Windows\System32\fcon.dll \Device\HarddiskVolume3\Windows\System32\fcon.dll (0x00007FFF9F590000) C:\WINDOWS\System32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) 6956: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\licensemanagersvc.dll \Device\HarddiskVolume3\Windows\System32\LicenseManagerSvc.dll (0x00007FFF86490000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) c:\windows\system32\LicenseManager.dll \Device\HarddiskVolume3\Windows\System32\LicenseManager.dll (0x00007FFF86360000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) c:\windows\system32\CLIPC.dll \Device\HarddiskVolume3\Windows\System32\Clipc.dll (0x00007FFF8CEA0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\System32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) 7916: backgroundTaskHost.exe C:\WINDOWS\system32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe (0x00007FF6DF940000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\system32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll (0x00007FFF8C6A0000) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.23101.22.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.23101.22.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll (0x00007FFF823F0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\msvcp140_app.dll (0x00007FFF87490000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_app.dll (0x00007FFF90490000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_1_app.dll (0x00007FFF9AC50000) C:\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll (0x00007FFF906D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) 8160: backgroundTaskHost.exe C:\WINDOWS\system32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe (0x00007FF6DF940000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\mrmcorer.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\system32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll (0x00007FFF8C6A0000) C:\Program Files\WindowsApps\Microsoft.YourPhone_0.24012.105.0_x64__8wekyb3d8bbwe\SharedUtilities.Stub.BackgroundTasks.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.YourPhone_0.24012.105.0_x64__8wekyb3d8bbwe\SharedUtilities.Stub.BackgroundTasks.dll (0x00007FFF82450000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_1_app.dll (0x00007FFF9AC50000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\vcruntime140_app.dll (0x00007FFF90490000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\msvcp140_app.dll (0x00007FFF87490000) C:\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll (0x00007FFF906D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) 8224: (ERROR 5) 8532: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\system32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\SYSTEM32\capauthz.dll \Device\HarddiskVolume3\Windows\System32\capauthz.dll (0x00007FFF90400000) C:\WINDOWS\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll (0x00007FFF6FA60000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll (0x00007FFF84A80000) C:\WINDOWS\SYSTEM32\DiagnosticDataSettings.dll \Device\HarddiskVolume3\Windows\System32\DiagnosticDataSettings.dll (0x00007FFFAA1D0000) C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll \Device\HarddiskVolume3\Windows\System32\CorePrivacySettingsStore.dll (0x00007FFFA99D0000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\WINDOWS\SYSTEM32\netjoin.dll \Device\HarddiskVolume3\Windows\System32\netjoin.dll (0x00007FFFA2380000) C:\WINDOWS\SYSTEM32\JoinUtil.dll \Device\HarddiskVolume3\Windows\System32\joinutil.dll (0x00007FFFA98D0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\DWrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\COMCTL32.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\comctl32.dll (0x00007FFF86DB0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\SYSTEM32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\SYSTEM32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\wevtapi.dll (0x00007FFFA4620000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\mscms.dll \Device\HarddiskVolume3\Windows\System32\mscms.dll (0x00007FFFA0D70000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\profext.dll \Device\HarddiskVolume3\Windows\System32\profext.dll (0x00007FFFA8140000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\SYSTEM32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\SETUPAPI.dll \Device\HarddiskVolume3\Windows\System32\setupapi.dll (0x00007FFFAD2E0000) C:\WINDOWS\SYSTEM32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Domain Actions\3.0.0.16\domain_actions.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Domain Actions\3.0.0.16\domain_actions.dll (0x00007FFF82D80000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\VCRUNTIME140.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vcruntime140.dll (0x00007FFF82BA0000) C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\system32\dataexchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\WINDOWS\SYSTEM32\atlthunk.dll \Device\HarddiskVolume3\Windows\System32\atlthunk.dll (0x00007FFF9AA50000) C:\WINDOWS\SYSTEM32\OLEACC.dll \Device\HarddiskVolume3\Windows\System32\oleacc.dll (0x00007FFF8C590000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\WINDOWS\system32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\webview2_integration.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\webview2_integration.dll (0x00007FFF95B50000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\VCRUNTIME140_1.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vcruntime140_1.dll (0x00007FFF8E970000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\telclient.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\telclient.dll (0x00007FFF65C40000) C:\WINDOWS\SYSTEM32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\dbghelp.dll (0x00007FFFAA2F0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\SYSTEM32\MFPlat.DLL \Device\HarddiskVolume3\Windows\System32\mfplat.dll (0x00007FFF97630000) C:\WINDOWS\SYSTEM32\RTWorkQ.DLL \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll (0x00007FFF975E0000) C:\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll (0x00007FFF8EAE0000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\oneds.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\oneds.dll (0x00007FFF65910000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll (0x00007FFF6EB70000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\aadWamExtension.dll \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll (0x00007FFF86C00000) C:\WINDOWS\system32\TenantRestrictionsPlugin.dll \Device\HarddiskVolume3\Windows\System32\TenantRestrictionsPlugin.dll (0x00007FFF658F0000) C:\WINDOWS\SYSTEM32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) C:\WINDOWS\SYSTEM32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\system32\PCPKsp.dll \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll (0x00007FFF9F3C0000) C:\Windows\System32\usermgrproxy.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll (0x00007FFFA1D20000) C:\WINDOWS\SYSTEM32\tbs.dll \Device\HarddiskVolume3\Windows\System32\tbs.dll (0x00007FFFA3940000) C:\WINDOWS\system32\ncryptprov.dll \Device\HarddiskVolume3\Windows\System32\ncryptprov.dll (0x00007FFF95FE0000) 8564: ctfmon.exe C:\WINDOWS\system32\ctfmon.exe \Device\HarddiskVolume3\Windows\System32\ctfmon.exe (0x00007FF61B310000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\system32\MsCtfMonitor.DLL \Device\HarddiskVolume3\Windows\System32\MsCtfMonitor.dll (0x00007FFF9EE90000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\system32\MSUTB.dll \Device\HarddiskVolume3\Windows\System32\msutb.dll (0x00007FFF9EE30000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\System32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\system32\InputService.dll \Device\HarddiskVolume3\Windows\System32\InputService.dll (0x00007FFF9E930000) C:\WINDOWS\system32\TextInputMethodFormatter.dll \Device\HarddiskVolume3\Windows\System32\TextInputMethodFormatter.dll (0x00007FFF9E710000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\MTFServer.dll \Device\HarddiskVolume3\Windows\System32\MTFServer.dll (0x00007FFF9CF30000) C:\WINDOWS\SYSTEM32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\windowmanagementapi.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\InputLocaleManager.dll \Device\HarddiskVolume3\Windows\System32\InputLocaleManager.dll (0x00007FFF9E6C0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\system32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\system32\KBDPL1.DLL \Device\HarddiskVolume3\Windows\System32\KBDPL1.DLL (0x00007FFFA8FF0000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\Windows\System32\MsSpellCheckingFacility.dll \Device\HarddiskVolume3\Windows\System32\MsSpellCheckingFacility.dll (0x00007FFF81E40000) C:\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\inputhost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\Windows\System32\mtf.dll \Device\HarddiskVolume3\Windows\System32\MTF.dll (0x00007FFF95EA0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) 8608: taskhostw.exe C:\WINDOWS\system32\taskhostw.exe \Device\HarddiskVolume3\Windows\System32\taskhostw.exe (0x00007FF7F25D0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\TaskSchdPS.dll \Device\HarddiskVolume3\Windows\System32\TaskSchdPS.dll (0x00007FFF84A30000) C:\Windows\System32\fcon.dll \Device\HarddiskVolume3\Windows\System32\fcon.dll (0x00007FFF9F590000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll (0x00007FFF9FBB0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\FlightSettings.dll \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll (0x00007FFF9A750000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) 8756: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) 8880: DllHost.exe C:\WINDOWS\system32\DllHost.exe \Device\HarddiskVolume3\Windows\System32\dllhost.exe (0x00007FF611BB0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\TaskSchdPS.dll \Device\HarddiskVolume3\Windows\System32\TaskSchdPS.dll (0x00007FFF84A30000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\system32\windows.ui.immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) 8904: RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe (0x00007FF68A5E0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\Windows\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll (0x00007FFF906D0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\OnDemandBrokerClient.dll \Device\HarddiskVolume3\Windows\System32\OnDemandBrokerClient.dll (0x00007FFF8E4C0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) 8992: RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe (0x00007FF68A5E0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\Windows\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll (0x00007FFF906D0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\OnDemandBrokerClient.dll \Device\HarddiskVolume3\Windows\System32\OnDemandBrokerClient.dll (0x00007FFF8E4C0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) 9084: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x0000026659A80000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll (0x00007FFF6FA60000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\WINDOWS\system32\mf.dll \Device\HarddiskVolume3\Windows\System32\mf.dll (0x00007FFFA8C00000) C:\WINDOWS\system32\mfplat.dll \Device\HarddiskVolume3\Windows\System32\mfplat.dll (0x00007FFF97630000) C:\WINDOWS\SYSTEM32\RTWorkQ.DLL \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll (0x00007FFF975E0000) C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.0.61931.0_x64__8wekyb3d8bbwe\x64\hevcdecoder_store.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.0.61931.0_x64__8wekyb3d8bbwe\x64\HEVCDECODER_STORE.dll (0x00007FFF6F570000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\D3DCompiler_47.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\d3dcompiler_47.dll (0x00007FFF6DE40000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\libglesv2.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\libGLESv2.dll (0x00007FFF6D760000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\libegl.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\libEGL.dll (0x00007FFF6F8C0000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vulkan-1.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vulkan-1.dll (0x00007FFF6F7D0000) C:\WINDOWS\SYSTEM32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vk_swiftshader.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vk_swiftshader.dll (0x00007FFF6D2A0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\SYSTEM32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\WINDOWS\SYSTEM32\D3D10Warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) 9120: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll (0x00007FFF6FA60000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\SYSTEM32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\SYSTEM32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) 6020: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll (0x00007FFF6FA60000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) 5644: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x0000018D01040000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll (0x00007FFF6FA60000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) C:\WINDOWS\SYSTEM32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\dbghelp.dll (0x00007FFFAA2F0000) C:\WINDOWS\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll (0x00007FFF6EB70000) C:\WINDOWS\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) 9520: (ERROR 5) 9564: smartscreen.exe C:\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\System32\smartscreen.exe (0x00007FF7CC370000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\Windows\System32\SmartScreen.DLL \Device\HarddiskVolume3\Windows\System32\smartscreen.dll (0x00007FFF6E2D0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Windows\System32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\Windows\System32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\Windows\System32\WTDSENSOR.dll \Device\HarddiskVolume3\Windows\System32\wtdsensor.dll (0x00007FFFA9C50000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll (0x00007FFF81D80000) C:\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll (0x00007FFF9B370000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) 9608: SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe (0x00007FF740700000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\atlthunk.dll \Device\HarddiskVolume3\Windows\System32\atlthunk.dll (0x00007FFF9AA50000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) \\?\C:\Windows\System32\SecurityHealthSSO.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthSSO.dll (0x00007FFF6D140000) C:\WINDOWS\system32\SecurityHealthSsoUdk.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthSsoUdk.dll (0x00007FFF81BC0000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) \\?\C:\Windows\System32\SecurityHealthProxyStub.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthProxyStub.dll (0x00007FFF81B60000) 9632: (ERROR 5) 9876: msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe (0x00007FF7CB7A0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll (0x00007FFF81FA0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x0000022250000000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll (0x00007FFF6FA60000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) C:\WINDOWS\SYSTEM32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\dbghelp.dll (0x00007FFFAA2F0000) C:\WINDOWS\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll (0x00007FFF6EB70000) C:\WINDOWS\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\SYSTEM32\DPAPI.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) 10060: wmiprvse.exe C:\WINDOWS\system32\wbem\wmiprvse.exe \Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSE.exe (0x00007FF7B0770000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\wbemcomn.dll \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll (0x00007FFF9C260000) C:\WINDOWS\system32\wbem\FastProx.dll \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll (0x00007FFF94840000) C:\WINDOWS\SYSTEM32\NCObjAPI.DLL \Device\HarddiskVolume3\Windows\System32\ncobjapi.dll (0x00007FFF95A00000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll (0x00007FFF94B20000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll (0x00007FFF95B60000) C:\WINDOWS\system32\wbem\wmiutils.dll \Device\HarddiskVolume3\Windows\System32\wbem\wmiutils.dll (0x00007FFF947A0000) C:\WINDOWS\System32\Win32_DeviceGuard.dll \Device\HarddiskVolume3\Windows\System32\Win32_DeviceGuard.dll (0x00007FFF81B90000) C:\WINDOWS\system32\wmitomi.dll \Device\HarddiskVolume3\Windows\System32\wmitomi.dll (0x00007FFF6D100000) C:\WINDOWS\SYSTEM32\miutils.dll \Device\HarddiskVolume3\Windows\System32\miutils.dll (0x00007FFF9B020000) 10440: OneDrive.exe C:\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe (0x00007FF7BD730000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\Secur32.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll (0x00007FFFA74F0000) C:\WINDOWS\SYSTEM32\VERSION.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\SYSTEM32\WININET.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll (0x00007FFF9E110000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\SSPICLI.DLL \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\ucrtbase.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\ucrtbase.dll (0x00007FFF6CFE0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncRNWin32Lib.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncRNWin32Lib.dll (0x00007FFF6CF90000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140_1.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\vcruntime140_1.dll (0x00007FFF9E640000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\vcruntime140.dll (0x00007FFF81B40000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\msvcp140.dll (0x00007FFF6CF00000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\LoggingPlatform.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\LoggingPlatform.dll (0x00007FFF6CE50000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\OneDriveTelemetryStable.dll (0x00007FFF6CBF0000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncTelemetryExtensions.dll (0x00007FFF6CAF0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll (0x00007FFFA8EF0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\Windows\System32\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll (0x00007FFF81B20000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncClient.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncClient.dll (0x00007FFF6BED0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncHost.DLL \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncHost.dll (0x00007FFF6BE50000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\WebView2Loader.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\WebView2Loader.dll (0x00007FFF6BE20000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\gdiplus.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\GdiPlus.dll (0x00007FFF8DE50000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\COMCTL32.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.dll (0x00007FFF91BF0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140_ATOMIC_WAIT.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\msvcp140_atomic_wait.dll (0x00007FFF6BC20000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\LogUploader.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\LogUploader.dll (0x00007FFF6BC40000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\UpdateRingSettings.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\UpdateRingSettings.dll (0x00007FFF6BD70000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncEvents.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncEvents.dll (0x00007FFF6BBF0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncViews.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncViews.dll (0x00007FFF6B890000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncSessions.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncSessions.dll (0x00007FFF6B270000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL \Device\HarddiskVolume3\Windows\System32\UIAutomationCore.dll (0x00007FFF8EB40000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFS.DLL \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFS.dll (0x00007FFF6B170000) C:\WINDOWS\SYSTEM32\wer.dll \Device\HarddiskVolume3\Windows\System32\wer.dll (0x00007FFFAA1F0000) C:\WINDOWS\SYSTEM32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncCxP.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncCxP.dll (0x00007FFF6A400000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\SyncEngine.DLL \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\SyncEngine.dll (0x00007FFF6A4A0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncSqlite3.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncSqlite3.dll (0x00007FFF6A350000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Telemetry.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Telemetry.dll (0x00007FFF6A240000) C:\WINDOWS\SYSTEM32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\credui.dll \Device\HarddiskVolume3\Windows\System32\credui.dll (0x00007FFF92220000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Qml.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Qml.dll (0x00007FFF69AD0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Quick.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Quick.dll (0x00007FFF69E40000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Core.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Core.dll (0x00007FFF694F0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Gui.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Gui.dll (0x00007FFF68E60000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5WinExtras.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5WinExtras.dll (0x00007FFF688D0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Widgets.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Widgets.dll (0x00007FFF68910000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\libcrypto-3-x64.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\libcrypto-3-x64.dll (0x00007FFF68280000) C:\WINDOWS\SYSTEM32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll (0x00007FFFA9AB0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\adal.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\adal.dll (0x00007FFF68100000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\SYSTEM32\RstrtMgr.DLL \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll (0x00007FFF680B0000) C:\WINDOWS\SYSTEM32\MPR.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll (0x00007FFF9D370000) C:\WINDOWS\SYSTEM32\NETAPI32.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll (0x00007FFF95F70000) C:\WINDOWS\SYSTEM32\WINMM.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll (0x00007FFF82BC0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Network.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Network.dll (0x00007FFF67F60000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5QmlModels.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5QmlModels.dll (0x00007FFF67EF0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140_1.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\msvcp140_1.dll (0x00007FFF84A50000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\WnsClientApi.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\WnsClientApi.dll (0x00007FFF67E00000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\libssl-3-x64.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\libssl-3-x64.dll (0x00007FFF67CC0000) C:\WINDOWS\SYSTEM32\NTASN1.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll (0x00007FFFA9A60000) C:\WINDOWS\SYSTEM32\Wscapi.dll \Device\HarddiskVolume3\Windows\System32\wscapi.dll (0x00007FFF81DB0000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\SYSTEM32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncCxPImpl.DLL \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncCxPImpl.dll (0x00007FFF67BD0000) C:\WINDOWS\SYSTEM32\atlthunk.dll \Device\HarddiskVolume3\Windows\System32\atlthunk.dll (0x00007FFF9AA50000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSNtfs.DLL \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSNtfs.dll (0x00007FFF67B00000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSNtfsWB.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSNtfsWB.dll (0x00007FFF67A70000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSDbfsWB.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSDbfsWB.dll (0x00007FFF67A30000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSCache.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSCache.dll (0x00007FFF679A0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFALWB.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFALWB.dll (0x00007FFF678F0000) C:\WINDOWS\SYSTEM32\cldapi.dll \Device\HarddiskVolume3\Windows\System32\cldapi.dll (0x00007FFF8BB70000) C:\WINDOWS\SYSTEM32\FLTLIB.DLL \Device\HarddiskVolume3\Windows\System32\fltLib.dll (0x00007FFFA8A70000) C:\WINDOWS\SYSTEM32\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSync.Resources.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSync.Resources.dll (0x000001A79E340000) C:\WINDOWS\system32\mlang.dll \Device\HarddiskVolume3\Windows\System32\mlang.dll (0x00007FFF832E0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSync.LocalizedResources.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSync.LocalizedResources.dll (0x000001A79E760000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\platforms\qwindows.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\platforms\qwindows.dll (0x00007FFF67740000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll (0x00007FFF9AD70000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll (0x00007FFFAA610000) C:\WINDOWS\SYSTEM32\webio.dll \Device\HarddiskVolume3\Windows\System32\webio.dll (0x00007FFFA9060000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Microsoft.UI.Xaml.dll (0x00007FFF67110000) C:\WINDOWS\SYSTEM32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll (0x00007FFF90EC0000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\Windows\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll (0x00007FFF8EAE0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\Windows\System32\aadWamExtension.dll \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll (0x00007FFF86C00000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\Windows\System32\WindowManagementAPI.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\Windows\System32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\WINDOWS\SYSTEM32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\system32\DataExchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\Windows\System32\MicrosoftAccountWAMExtension.dll \Device\HarddiskVolume3\Windows\System32\MicrosoftAccountWAMExtension.dll (0x00007FFF67060000) C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Microsoft.ReactNative.dll (0x00007FFF66D60000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140_APP.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\msvcp140_app.dll (0x000001A7A5900000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140_1_APP.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\vcruntime140_1_app.dll (0x000001A7A5950000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140_APP.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\vcruntime140_app.dll (0x000001A7A5970000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\CheckboxWindows.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\CheckboxWindows.dll (0x00007FFF66860000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\ReactNativePicker.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\ReactNativePicker.dll (0x00007FFF668A0000) C:\WINDOWS\SYSTEM32\rometadata.dll \Device\HarddiskVolume3\Windows\System32\rometadata.dll (0x00007FFF90300000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\RNSVG.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\RNSVG.dll (0x00007FFF66C40000) C:\WINDOWS\SYSTEM32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\Windows\System32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\SYSTEM32\familysafetyext.dll \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll (0x00007FFF84A20000) C:\Windows\System32\wpc.dll \Device\HarddiskVolume3\Windows\System32\Wpc.dll (0x00007FFF66AD0000) C:\WINDOWS\System32\Normaliz.dll \Device\HarddiskVolume3\Windows\System32\normaliz.dll (0x00007FFFAD880000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileCoAuthLib64.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileCoAuthLib64.dll (0x00007FFF66A90000) C:\WINDOWS\System32\wlidprov.dll \Device\HarddiskVolume3\Windows\System32\wlidprov.dll (0x00007FFF94020000) C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll \Device\HarddiskVolume3\Windows\System32\CorePrivacySettingsStore.dll (0x00007FFFA99D0000) C:\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll (0x00007FFF66990000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\WINDOWS\SYSTEM32\DSREG.DLL \Device\HarddiskVolume3\Windows\System32\dsreg.dll (0x00007FFFA4BB0000) C:\WINDOWS\SYSTEM32\WKSCLI.DLL \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\hermes.dll \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\hermes.dll (0x00007FFF66270000) C:\WINDOWS\SYSTEM32\icuin.dll \Device\HarddiskVolume3\Windows\System32\icuin.dll (0x000001A7A5BD0000) C:\WINDOWS\SYSTEM32\icuuc.dll \Device\HarddiskVolume3\Windows\System32\icuuc.dll (0x000001A7A5BE0000) C:\WINDOWS\SYSTEM32\icu.DLL \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\system32\explorerframe.dll \Device\HarddiskVolume3\Windows\System32\ExplorerFrame.dll (0x00007FFF8C2C0000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\Windows\System32\Windows.UI.Core.TextInput.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Core.TextInput.dll (0x00007FFF94C50000) C:\Windows\System32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\SYSTEM32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\system32\mssprxy.dll \Device\HarddiskVolume3\Windows\System32\mssprxy.dll (0x00007FFF661D0000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\SYSTEM32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\WINDOWS\SYSTEM32\ntshrui.dll \Device\HarddiskVolume3\Windows\System32\ntshrui.dll (0x00007FFF8A560000) C:\WINDOWS\SYSTEM32\cscapi.dll \Device\HarddiskVolume3\Windows\System32\cscapi.dll (0x00007FFF923B0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\Windows\System32\BitsProxy.dll \Device\HarddiskVolume3\Windows\System32\BitsProxy.dll (0x00007FFF658B0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) 10720: svchost.exe C:\WINDOWS\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\qmgr.dll \Device\HarddiskVolume3\Windows\System32\qmgr.dll (0x00007FFF666F0000) c:\windows\system32\bitsperf.dll \Device\HarddiskVolume3\Windows\System32\bitsperf.dll (0x00007FFF6F7C0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) c:\windows\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\FlightSettings.dll \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll (0x00007FFF9A750000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll (0x00007FFFA35B0000) C:\WINDOWS\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll (0x00007FFFA00B0000) C:\WINDOWS\SYSTEM32\bitsigd.dll \Device\HarddiskVolume3\Windows\System32\bitsigd.dll (0x00007FFF66970000) C:\WINDOWS\system32\upnp.dll \Device\HarddiskVolume3\Windows\System32\upnp.dll (0x00007FFF668F0000) C:\WINDOWS\system32\WINHTTP.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll (0x00007FFFA0F80000) C:\WINDOWS\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\system32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\system32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\system32\SSDPAPI.dll \Device\HarddiskVolume3\Windows\System32\ssdpapi.dll (0x00007FFFA01E0000) C:\WINDOWS\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) C:\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll (0x00007FFFA3430000) c:\windows\system32\ESENT.dll \Device\HarddiskVolume3\Windows\System32\esent.dll (0x00007FFF9B3C0000) C:\WINDOWS\System32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\WSMAUTO.DLL \Device\HarddiskVolume3\Windows\System32\WsmAuto.dll (0x00007FFF66190000) C:\Windows\System32\miutils.dll \Device\HarddiskVolume3\Windows\System32\miutils.dll (0x00007FFF9B020000) C:\Windows\System32\WsmSvc.DLL \Device\HarddiskVolume3\Windows\System32\WsmSvc.dll (0x00007FFF65EE0000) C:\Windows\System32\mi.dll \Device\HarddiskVolume3\Windows\System32\mi.dll (0x00007FFF9B090000) C:\Windows\System32\pcwum.dll \Device\HarddiskVolume3\Windows\System32\pcwum.dll (0x000001DAE7800000) C:\Windows\System32\DSROLE.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll (0x00007FFFA4740000) C:\WINDOWS\system32\Userenv.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll (0x00007FFFA9620000) C:\Windows\System32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll (0x00007FFFA24C0000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\webio.dll \Device\HarddiskVolume3\Windows\System32\webio.dll (0x00007FFFA9060000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll (0x00007FFFA0620000) C:\WINDOWS\System32\fwpuclnt.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL (0x00007FFFA0590000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\Windows\System32\execmodelclient.dll \Device\HarddiskVolume3\Windows\System32\ExecModelClient.dll (0x00007FFF90E60000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\coml2.dll \Device\HarddiskVolume3\Windows\System32\coml2.dll (0x00007FFFAC1E0000) C:\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll (0x00007FFF98120000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll (0x00007FFFA7330000) C:\WINDOWS\SYSTEM32\vssapi.DLL \Device\HarddiskVolume3\Windows\System32\vssapi.dll (0x00007FFFA1BA0000) C:\WINDOWS\SYSTEM32\VssTrace.DLL \Device\HarddiskVolume3\Windows\System32\vsstrace.dll (0x00007FFFA1A90000) C:\WINDOWS\SYSTEM32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) C:\WINDOWS\SYSTEM32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\ES.DLL \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\BitsProxy.dll \Device\HarddiskVolume3\Windows\System32\BitsProxy.dll (0x00007FFF658B0000) C:\WINDOWS\SYSTEM32\connectionattributionapi.dll \Device\HarddiskVolume3\Windows\System32\ConnectionAttributionApi.dll (0x00007FFF65890000) 10768: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\ssdpsrv.dll \Device\HarddiskVolume3\Windows\System32\ssdpsrv.dll (0x00007FFF66210000) C:\WINDOWS\system32\FirewallAPI.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll (0x00007FFFA8080000) C:\WINDOWS\system32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll (0x00007FFFA8030000) c:\windows\system32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll (0x00007FFFA1710000) C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll (0x00007FFFA0CA0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\system32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll (0x00007FFFA95B0000) C:\WINDOWS\system32\FWPolicyIOMgr.dll \Device\HarddiskVolume3\Windows\System32\fwpolicyiomgr.dll (0x00007FFF9DE50000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\winnsi.dll (0x00007FFFA6DA0000) c:\windows\system32\POWRPROF.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) c:\windows\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) 10812: SearchIndexer.exe C:\WINDOWS\system32\SearchIndexer.exe \Device\HarddiskVolume3\Windows\System32\SearchIndexer.exe (0x00007FF607390000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\system32\MSSRCH.DLL \Device\HarddiskVolume3\Windows\System32\mssrch.dll (0x00007FFF8FD40000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\TQUERY.DLL \Device\HarddiskVolume3\Windows\System32\tquery.dll (0x00007FFF8F9D0000) C:\WINDOWS\system32\SearchIndexerCore.dll \Device\HarddiskVolume3\Windows\System32\SearchIndexerCore.dll (0x00007FFF8F8E0000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\system32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\system32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\rmclient.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\system32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\system32\mssprxy.dll \Device\HarddiskVolume3\Windows\System32\mssprxy.dll (0x00007FFF661D0000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\system32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\vssapi.dll \Device\HarddiskVolume3\Windows\System32\vssapi.dll (0x00007FFFA1BA0000) C:\WINDOWS\system32\VssTrace.DLL \Device\HarddiskVolume3\Windows\System32\vsstrace.dll (0x00007FFFA1A90000) C:\WINDOWS\system32\samcli.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll (0x00007FFFA8180000) C:\WINDOWS\system32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\system32\SAMLIB.dll \Device\HarddiskVolume3\Windows\System32\samlib.dll (0x00007FFFA81A0000) C:\WINDOWS\System32\ES.DLL \Device\HarddiskVolume3\Windows\System32\es.dll (0x00007FFFA0A40000) C:\WINDOWS\system32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll (0x00007FFFA4260000) C:\WINDOWS\SYSTEM32\sxs.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll (0x00007FFFAA710000) C:\WINDOWS\System32\MSWB7.dll \Device\HarddiskVolume3\Windows\System32\MSWB7.dll (0x00007FFF82DA0000) C:\WINDOWS\SYSTEM32\elscore.dll \Device\HarddiskVolume3\Windows\System32\ELSCore.dll (0x00007FFF6D260000) C:\WINDOWS\system32\ElsLad.dll \Device\HarddiskVolume3\Windows\System32\elslad.dll (0x00007FFF64000000) C:\WINDOWS\system32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) 3316: DllHost.exe C:\WINDOWS\system32\DllHost.exe \Device\HarddiskVolume3\Windows\System32\dllhost.exe (0x00007FF611BB0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2507.26.0_x64__8wekyb3d8bbwe\NotepadExplorerCommand\NotepadExplorerCommand.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2507.26.0_x64__8wekyb3d8bbwe\NotepadExplorerCommand\NotepadExplorerCommand.dll (0x00007FFF64550000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\SHELL32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\SHLWAPI.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\VCRUNTIME140.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140.dll (0x00007FFF64530000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\MSVCP140.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\msvcp140.dll (0x00007FFF644A0000) C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140_1.dll (0x00007FFF6D230000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\SHCORE.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\Windows\System32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) 9288: SearchProtocolHost.exe C:\WINDOWS\System32\SearchProtocolHost.exe \Device\HarddiskVolume3\Windows\System32\SearchProtocolHost.exe (0x00007FF761670000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\mssprxy.dll \Device\HarddiskVolume3\Windows\System32\mssprxy.dll (0x00007FFF661D0000) C:\WINDOWS\system32\mssph.dll \Device\HarddiskVolume3\Windows\System32\mssph.dll (0x00007FFF640C0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\AUTHZ.dll \Device\HarddiskVolume3\Windows\System32\authz.dll (0x00007FFFA83A0000) C:\WINDOWS\SYSTEM32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll (0x00007FFFAA190000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\system32\propsys.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll (0x00007FFFACB90000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\Windows\System32\Windows.FileExplorer.Common.dll \Device\HarddiskVolume3\Windows\System32\Windows.FileExplorer.Common.dll (0x00007FFF89A00000) C:\WINDOWS\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\System32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\Windows\System32\cldapi.dll \Device\HarddiskVolume3\Windows\System32\cldapi.dll (0x00007FFF8BB70000) C:\WINDOWS\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) 10172: MpCmdRun.exe C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe (0x00007FF713D70000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll (0x00007FFF9DED0000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) 9268: MpCmdRun.exe C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe (0x00007FF713D70000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\WINTRUST.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll (0x00007FFFAAFF0000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll (0x00007FFF9DED0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\MSASN1.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll (0x00007FFFA98B0000) C:\WINDOWS\system32\version.dll \Device\HarddiskVolume3\Windows\System32\version.dll (0x00007FFFA74C0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) 1316: conhost.exe C:\WINDOWS\system32\conhost.exe \Device\HarddiskVolume3\Windows\System32\conhost.exe (0x00007FF724440000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\IMM32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) 1044: conhost.exe C:\WINDOWS\system32\conhost.exe \Device\HarddiskVolume3\Windows\System32\conhost.exe (0x00007FF724440000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\IMM32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) 9224: ShellExperienceHost.exe C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe \Device\HarddiskVolume3\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe (0x00007FF67F880000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\SYSTEM32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll (0x00007FFFA6EC0000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\SYSTEM32\wincorlib.DLL \Device\HarddiskVolume3\Windows\System32\wincorlib.dll (0x00007FFF9AAE0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll (0x00007FFFA6E50000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll (0x00007FFF98B50000) C:\WINDOWS\SYSTEM32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll (0x00007FFF9C2E0000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll (0x00007FFFA81D0000) C:\WINDOWS\SYSTEM32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll (0x00007FFF9CFE0000) C:\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll (0x00007FFFA1850000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll (0x00007FFF99C70000) C:\WINDOWS\SYSTEM32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\SYSTEM32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll (0x00007FFF9C680000) C:\WINDOWS\SYSTEM32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\SYSTEM32\dxcore.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll (0x00007FFFA7030000) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.QuickActions.dll \Device\HarddiskVolume3\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.QuickActions.dll (0x00007FFF63730000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\SYSTEM32\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\System32\WindowsCodecs.dll (0x00007FFFA4D20000) C:\WINDOWS\SYSTEM32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll (0x00007FFFA5670000) C:\WINDOWS\SYSTEM32\QuickActionsDataModel.dll \Device\HarddiskVolume3\Windows\System32\QuickActionsDataModel.dll (0x00007FFF636C0000) C:\WINDOWS\SYSTEM32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\SYSTEM32\d3d11.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll (0x00007FFFA5400000) C:\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll \Device\HarddiskVolume3\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll (0x00007FFF88140000) C:\Windows\ShellExperiences\NetworkUX.dll \Device\HarddiskVolume3\Windows\ShellExperiences\NetworkUX.dll (0x00007FFF634C0000) C:\WINDOWS\SYSTEM32\MobileNetworking.dll \Device\HarddiskVolume3\Windows\System32\mobilenetworking.dll (0x00007FFFA0B60000) C:\WINDOWS\SYSTEM32\d3d10warp.dll \Device\HarddiskVolume3\Windows\System32\d3d10warp.dll (0x00007FFFA25B0000) C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\DevicesFlowUI.dll \Device\HarddiskVolume3\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\DevicesFlowUI.dll (0x00007FFF63250000) C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.ActionCenter.dll \Device\HarddiskVolume3\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.ActionCenter.dll (0x00007FFF62D80000) C:\WINDOWS\SYSTEM32\dwrite.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll (0x00007FFFA5CE0000) C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll (0x00007FFF8D020000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\Windows\System32\Windows.Storage.ApplicationData.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll (0x00007FFF87750000) C:\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll (0x00007FFF9A620000) C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll (0x00007FFF9AB50000) C:\WINDOWS\SYSTEM32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll (0x00007FFF96D20000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\SYSTEM32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll (0x00007FFFAA930000) C:\WINDOWS\SYSTEM32\languageoverlayutil.dll \Device\HarddiskVolume3\Windows\System32\LanguageOverlayUtil.dll (0x00007FFF9A980000) C:\WINDOWS\SYSTEM32\bcp47mrm.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll (0x00007FFF9A940000) C:\WINDOWS\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll (0x00007FFF91A60000) C:\WINDOWS\system32\execmodelproxy.dll \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll (0x00007FFF90680000) C:\WINDOWS\system32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\SYSTEM32\RMCLIENT.dll \Device\HarddiskVolume3\Windows\System32\rmclient.dll (0x00007FFFA72F0000) C:\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll (0x00007FFF90560000) C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Core.TextInput.dll (0x00007FFF94C50000) C:\WINDOWS\SYSTEM32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll (0x00007FFF98A00000) C:\WINDOWS\system32\DataExchange.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll (0x00007FFF8CC60000) C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll (0x00007FFF981E0000) C:\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll (0x00007FFF98860000) C:\WINDOWS\SYSTEM32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\system32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll (0x00007FFF95490000) C:\WINDOWS\system32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll (0x00007FFF9F890000) C:\WINDOWS\SYSTEM32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll (0x00007FFFA60B0000) C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll (0x00007FFFA5CC0000) C:\Windows\System32\NotificationControllerPS.dll \Device\HarddiskVolume3\Windows\System32\NotificationControllerPS.dll (0x00007FFF8CFA0000) C:\Windows\ShellComponents\WindowsInternal.ShellUI.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ShellUI.dll (0x00007FFF858C0000) C:\Windows\System32\Windows.Globalization.Fontgroups.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.Fontgroups.dll (0x00007FFF90290000) C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll \Device\HarddiskVolume3\Windows\System32\fontgroupsoverride.dll (0x00007FFF9AAB0000) C:\Windows\System32\Windows.ApplicationModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.dll (0x00007FFF960B0000) C:\Windows\System32\Windows.Energy.dll \Device\HarddiskVolume3\Windows\System32\Windows.Energy.dll (0x00007FFF8C640000) C:\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll (0x00007FFFA0CD0000) C:\Windows\System32\NotificationIntelligencePlatform.dll \Device\HarddiskVolume3\Windows\System32\NotificationIntelligencePlatform.dll (0x00007FFF642B0000) C:\WINDOWS\SYSTEM32\dmiso8601utils.dll \Device\HarddiskVolume3\Windows\System32\dmiso8601utils.dll (0x00007FFF8E990000) C:\Windows\System32\msxml6.dll \Device\HarddiskVolume3\Windows\System32\msxml6.dll (0x00007FFF9A1E0000) C:\WINDOWS\SYSTEM32\USERENV.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll (0x00007FFFA9650000) C:\WINDOWS\SYSTEM32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll \Device\HarddiskVolume3\Windows\System32\PhotoMetadataHandler.dll (0x00007FFF973A0000) C:\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll (0x00007FFF85970000) C:\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll (0x00007FFF9F160000) C:\WINDOWS\SYSTEM32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll (0x00007FFFA6E30000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\msftedit.dll \Device\HarddiskVolume3\Windows\System32\msftedit.dll (0x00007FFF943F0000) C:\WINDOWS\SYSTEM32\globinputhost.dll \Device\HarddiskVolume3\Windows\System32\globinputhost.dll (0x00007FFF943B0000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\SYSTEM32\audioses.dll \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\WINDOWS\System32\MMDevApi.dll \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll (0x00007FFFA0200000) C:\WINDOWS\SYSTEM32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\SYSTEM32\rdpendp.dll \Device\HarddiskVolume3\Windows\System32\rdpendp.dll (0x00007FFFA8E30000) C:\WINDOWS\SYSTEM32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\SYSTEM32\AVRT.dll \Device\HarddiskVolume3\Windows\System32\avrt.dll (0x00007FFFA3350000) C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll (0x00007FFFA7330000) 10232: RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe (0x00007FF68A5E0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\Windows\System32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\system32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll (0x00007FFFA7670000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll (0x00007FFFA10B0000) C:\Windows\System32\CapabilityAccessManagerClient.dll \Device\HarddiskVolume3\Windows\System32\CapabilityAccessManagerClient.dll (0x00007FFF86C40000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll (0x00007FFFAC7E0000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\CFGMGR32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll (0x00007FFF9BB60000) C:\WINDOWS\System32\icu.dll \Device\HarddiskVolume3\Windows\System32\icu.dll (0x00007FFF9B8B0000) C:\WINDOWS\system32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll (0x00007FFF96EB0000) C:\WINDOWS\system32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll (0x00007FFF96210000) C:\WINDOWS\system32\edputil.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll (0x00007FFF961E0000) C:\WINDOWS\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) 10344: AUDIODG.EXE C:\WINDOWS\system32\AUDIODG.EXE \Device\HarddiskVolume3\Windows\System32\audiodg.exe (0x00007FF766E40000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) C:\WINDOWS\system32\MMDevAPI.DLL \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll (0x00007FFFA0200000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\AudioSes.dll \Device\HarddiskVolume3\Windows\System32\AudioSes.dll (0x00007FFF9F940000) C:\WINDOWS\system32\DEVOBJ.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll (0x00007FFFAA560000) C:\WINDOWS\SYSTEM32\winsta.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\audioeng.dll \Device\HarddiskVolume3\Windows\System32\AudioEng.dll (0x00007FFF62B60000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\System32\PROPSYS.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll (0x00007FFFA4A70000) C:\WINDOWS\system32\rdpendp.dll \Device\HarddiskVolume3\Windows\System32\rdpendp.dll (0x00007FFFA8E30000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\system32\MF.dll \Device\HarddiskVolume3\Windows\System32\mf.dll (0x00007FFFA8C00000) C:\WINDOWS\system32\MFCORE.DLL \Device\HarddiskVolume3\Windows\System32\mfcore.dll (0x00007FFF95070000) C:\WINDOWS\system32\MFPlat.dll \Device\HarddiskVolume3\Windows\System32\mfplat.dll (0x00007FFF97630000) C:\WINDOWS\system32\RTWorkQ.DLL \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll (0x00007FFF975E0000) C:\Windows\System32\mfAACEnc.dll \Device\HarddiskVolume3\Windows\System32\mfAACEnc.dll (0x00007FFF62900000) C:\WINDOWS\system32\MSACM32.dll \Device\HarddiskVolume3\Windows\System32\msacm32.dll (0x00007FFF628D0000) C:\WINDOWS\SYSTEM32\winmmbase.dll \Device\HarddiskVolume3\Windows\System32\winmmbase.dll (0x00007FFF62890000) C:\WINDOWS\system32\imaadp32.acm \Device\HarddiskVolume3\Windows\System32\imaadp32.acm (0x00007FFF64650000) C:\WINDOWS\system32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msadp32.acm (0x00007FFF8E980000) C:\WINDOWS\system32\msg711.acm \Device\HarddiskVolume3\Windows\System32\msg711.acm (0x00007FFF62880000) C:\WINDOWS\system32\msgsm32.acm \Device\HarddiskVolume3\Windows\System32\msgsm32.acm (0x00007FFF62860000) C:\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\l3codeca.acm (0x00007FFF62840000) C:\WINDOWS\system32\AVRT.dll \Device\HarddiskVolume3\Windows\System32\avrt.dll (0x00007FFFA3350000) 7296: ctfmon.exe C:\WINDOWS\system32\ctfmon.exe \Device\HarddiskVolume3\Windows\System32\ctfmon.exe (0x00007FF61B310000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\system32\MsCtfMonitor.DLL \Device\HarddiskVolume3\Windows\System32\MsCtfMonitor.dll (0x00007FFF9EE90000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\system32\MSUTB.dll \Device\HarddiskVolume3\Windows\System32\msutb.dll (0x00007FFF9EE30000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\USER32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll (0x00007FFFABD00000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll (0x00007FFFA6730000) C:\WINDOWS\System32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll (0x00007FFFA2DC0000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\WINDOWS\system32\InputService.dll \Device\HarddiskVolume3\Windows\System32\InputService.dll (0x00007FFF9E930000) C:\WINDOWS\system32\TextInputMethodFormatter.dll \Device\HarddiskVolume3\Windows\System32\TextInputMethodFormatter.dll (0x00007FFF9E710000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\system32\MTFServer.dll \Device\HarddiskVolume3\Windows\System32\MTFServer.dll (0x00007FFF9CF30000) C:\WINDOWS\SYSTEM32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\windowmanagementapi.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll (0x00007FFFA2B70000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\InputLocaleManager.dll \Device\HarddiskVolume3\Windows\System32\InputLocaleManager.dll (0x00007FFF9E6C0000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\WINDOWS\system32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\system32\Bcp47Langs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll (0x00007FFF9E650000) C:\WINDOWS\system32\KBDPL1.DLL \Device\HarddiskVolume3\Windows\System32\KBDPL1.DLL (0x00007FFFA8FF0000) C:\WINDOWS\SYSTEM32\inputhost.dll \Device\HarddiskVolume3\Windows\System32\InputHost.dll (0x00007FFF9E450000) C:\WINDOWS\SYSTEM32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) C:\Windows\System32\mtf.dll \Device\HarddiskVolume3\Windows\System32\MTF.dll (0x00007FFF95EA0000) 5696: VSTriage.exe C:\Users\GT\Desktop\VSTriage.exe \Device\HarddiskVolume3\Users\GT\Desktop\VSTriage.exe (0x00007FF77A3F0000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\SYSTEM32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) C:\WINDOWS\System32\ADVAPI32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\WS2_32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll (0x00007FFFABB50000) C:\WINDOWS\System32\CRYPT32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll (0x00007FFFAAA10000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL (0x00007FFFA81E0000) C:\WINDOWS\SYSTEM32\DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll (0x00007FFFA8270000) C:\WINDOWS\SYSTEM32\Secur32.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll (0x00007FFFA74F0000) C:\WINDOWS\SYSTEM32\SSPICLI.DLL \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\WINDOWS\System32\NSI.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll (0x00007FFFABA80000) 5704: svchost.exe C:\WINDOWS\system32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe (0x00007FF667980000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) c:\windows\system32\pcasvc.dll \Device\HarddiskVolume3\Windows\System32\pcasvc.dll (0x00007FFF62710000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll (0x00007FFFAA590000) c:\windows\system32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll (0x00007FFFA6B10000) c:\windows\system32\WININET.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll (0x00007FFF9E110000) c:\windows\system32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\wevtapi.dll (0x00007FFFA4620000) c:\windows\system32\drvstore.dll \Device\HarddiskVolume3\Windows\System32\drvstore.dll (0x00007FFF9C030000) C:\WINDOWS\SYSTEM32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll (0x00007FFFAA890000) C:\WINDOWS\SYSTEM32\UMPDC.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll (0x00007FFFAA870000) c:\windows\system32\WTSAPI32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll (0x00007FFFA6BC0000) c:\windows\system32\WINSTA.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll (0x00007FFFAA7C0000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll (0x00007FFFA41B0000) C:\Windows\System32\SspiCli.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll (0x00007FFFA92D0000) C:\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll (0x00007FFF9FBB0000) C:\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll (0x00007FFF9FB10000) C:\WINDOWS\System32\wintypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll (0x00007FFFAAB90000) C:\Windows\System32\XmlLite.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll (0x00007FFFA8A20000) C:\WINDOWS\SYSTEM32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll (0x00007FFFA5FF0000) C:\Windows\System32\msvcp110_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll (0x00007FFFA5F50000) C:\WINDOWS\system32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll (0x00007FFFA8730000) C:\WINDOWS\system32\CRYPTBASE.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll (0x00007FFFA9950000) C:\WINDOWS\system32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll (0x00007FFFAA900000) C:\WINDOWS\SYSTEM32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll (0x00007FFFAA540000) 11016: conhost.exe C:\WINDOWS\system32\conhost.exe \Device\HarddiskVolume3\Windows\System32\conhost.exe (0x00007FF724440000) C:\WINDOWS\SYSTEM32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll (0x00007FFFAD8E0000) C:\WINDOWS\System32\KERNEL32.DLL \Device\HarddiskVolume3\Windows\System32\kernel32.dll (0x00007FFFAC260000) C:\WINDOWS\System32\KERNELBASE.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll (0x00007FFFAB120000) C:\WINDOWS\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll (0x00007FFFAADD0000) C:\WINDOWS\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll (0x00007FFFAB520000) C:\WINDOWS\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll (0x00007FFFAB9C0000) C:\WINDOWS\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll (0x00007FFFAB670000) C:\WINDOWS\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll (0x00007FFFAB720000) C:\WINDOWS\System32\RPCRT4.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll (0x00007FFFAC030000) C:\WINDOWS\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll (0x00007FFFAC850000) C:\WINDOWS\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll (0x00007FFFAAE80000) C:\WINDOWS\System32\GDI32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll (0x00007FFFAC6C0000) C:\WINDOWS\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll (0x00007FFFAAEB0000) C:\WINDOWS\System32\IMM32.DLL \Device\HarddiskVolume3\Windows\System32\imm32.dll (0x00007FFFABA90000) C:\WINDOWS\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll (0x00007FFFAC330000) C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll (0x00007FFFA87D0000) C:\WINDOWS\System32\bcryptPrimitives.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll (0x00007FFFAB080000) C:\WINDOWS\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll (0x00007FFFAD7D0000) C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll (0x00007FFF9CFC0000) C:\WINDOWS\system32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll (0x00007FFFA6CE0000) C:\WINDOWS\System32\MSCTF.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll (0x00007FFFACA20000) C:\WINDOWS\System32\shcore.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll (0x00007FFFABC00000) C:\WINDOWS\SYSTEM32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll (0x00007FFF9A880000) C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.DLL \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.dll (0x00007FFF91BF0000) C:\WINDOWS\SYSTEM32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll (0x00007FFFA7080000) C:\WINDOWS\System32\OLEAUT32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll (0x00007FFFAC6F0000) C:\WINDOWS\SYSTEM32\textinputframework.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll (0x00007FFF9CD90000) ====Modules from PEB==== 2025-12-02T11:35:14Z 0: (ERROR 87) 4: (ERROR 5) 172: (ERROR 5) 716: (ERROR 5) 892: (ERROR 5) 964: (ERROR 5) 972: (ERROR 5) 804: FullDllName: C:\WINDOWS\system32\winlogon.exe DLLBase: 0x7ff78c060000 SizeOfImage: 0xf2000 ParentDllBase: 0x0 OriginalBase: 0x7ff78c060000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\utcapi.dll DLLBase: 0x7fffaa830000 SizeOfImage: 0xe000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa830000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+158ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+174ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profext.dll DLLBase: 0x7fffa8140000 SizeOfImage: 0x31000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffa8140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+174ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+174ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fffa8140000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+174ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+174ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\uxinit.dll DLLBase: 0x7fffa6dc0000 SizeOfImage: 0x32000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa6dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UxTheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x7fffa6dc0000 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa6dc0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffaa610000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dwminit.dll DLLBase: 0x7fffa6be0000 SizeOfImage: 0x22000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa6be0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+316ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+332ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4000ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4509ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 860: (ERROR 5) 1052: (ERROR 5) 1192: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\umpnpmgr.dll DLLBase: 0x7fffa7ff0000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa7ff0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7ff0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\umpo.dll DLLBase: 0x7fffa7fb0000 SizeOfImage: 0x39000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7fb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa7fb0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa7fb0000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa7fb0000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\umpoext.dll DLLBase: 0x7fffa7f30000 SizeOfImage: 0x4b000 ParentDllBase: 0x7fffa7fb0000 OriginalBase: 0x7fffa7f30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\umpodev.dll DLLBase: 0x7fffa7f20000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffa7f20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\umpo-overrides.dll DLLBase: 0x7fffa7f00000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7f00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x0 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\HID.DLL DLLBase: 0x7fffa7ee0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffa7ee0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fffa7f30000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\rpcss.dll DLLBase: 0x7fffa7500000 SizeOfImage: 0x16b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7500000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\psmsrv.dll DLLBase: 0x7fffa7450000 SizeOfImage: 0x4c000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7450000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+78ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bisrv.dll DLLBase: 0x7fffa7350000 SizeOfImage: 0xee000 ParentDllBase: 0x7fffa7450000 OriginalBase: 0x7fffa7350000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+78ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa7350000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\EventAggregation.dll DLLBase: 0x7fffaa5f0000 SizeOfImage: 0x18000 ParentDllBase: 0x7fffa7350000 OriginalBase: 0x7fffaa5f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ResourcePolicyClient.dll DLLBase: 0x7fffa7330000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa7350000 OriginalBase: 0x7fffa7330000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa7350000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\psmserviceexthost.dll DLLBase: 0x7fffa70f0000 SizeOfImage: 0xff000 ParentDllBase: 0x7fffa7450000 OriginalBase: 0x7fffa70f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa70f0000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wer.dll DLLBase: 0x7fffaa1f0000 SizeOfImage: 0xf6000 ParentDllBase: 0x7fffa70f0000 OriginalBase: 0x7fffaa1f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\embeddedmodesvcapi.dll DLLBase: 0x7fffa70c0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffa7350000 OriginalBase: 0x7fffa70c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+94ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffa70f0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+110ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa70f0000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+110ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\resourcepolicyserver.dll DLLBase: 0x7fffa6e00000 SizeOfImage: 0x2a000 ParentDllBase: 0x7fffa70f0000 OriginalBase: 0x7fffa6e00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+110ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+126ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+126ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\systemeventsbrokerserver.dll DLLBase: 0x7fffa6c90000 SizeOfImage: 0x42000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6c90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+126ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\BrokerLib.dll DLLBase: 0x7fffa6c50000 SizeOfImage: 0x35000 ParentDllBase: 0x7fffa6c90000 OriginalBase: 0x7fffa6c50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+126ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DAB.dll DLLBase: 0x7fffa6c20000 SizeOfImage: 0x23000 ParentDllBase: 0x7fffa6c90000 OriginalBase: 0x7fffa6c20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+126ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fffa6c20000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+190ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bi.dll DLLBase: 0x7fffa3620000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa6c50000 OriginalBase: 0x7fffa3620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3592ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa6e00000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3633ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3635ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3635ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3635ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11531ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11531ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11531ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11660ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll DLLBase: 0x7fff90a10000 SizeOfImage: 0x21000 ParentDllBase: 0x0 OriginalBase: 0x7fff90a10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11669ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ACPBackgroundManagerPolicy.dll DLLBase: 0x7fff909c0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fff909c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11671ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\BackgroundMediaPolicy.dll DLLBase: 0x7fff921d0000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff921d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11673ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SmartCardBackgroundPolicy.dll DLLBase: 0x7fff91a90000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11678ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SebBackgroundManagerPolicy.dll DLLBase: 0x7fff90800000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff90800000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11678ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11678ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11680ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11680ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11686ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11690ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\execmodelclient.dll DLLBase: 0x7fff90e60000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff90e60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11690ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff90e60000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11707ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11707ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fff90e60000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11709ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+11962ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\licensemanagerapi.dll DLLBase: 0x7fff90bc0000 SizeOfImage: 0x21000 ParentDllBase: 0x7fffa70f0000 OriginalBase: 0x7fff90bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12380ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12388ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\daxexec.dll DLLBase: 0x7fff900a0000 SizeOfImage: 0x11d000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fff900a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12477ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\container.dll DLLBase: 0x7fff90040000 SizeOfImage: 0x52000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff90040000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12477ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12479ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\AppXAllUserStore.dll DLLBase: 0x7fffa9bb0000 SizeOfImage: 0x71000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fffa9bb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12481ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12502ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12511ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\BINDFLTAPI.dll DLLBase: 0x7fff88100000 SizeOfImage: 0x39000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff88100000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12550ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\FLTLIB.DLL DLLBase: 0x7fffa8a70000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff88100000 OriginalBase: 0x7fffa8a70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12550ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12671ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\NduProv.dll DLLBase: 0x7fff9ae20000 SizeOfImage: 0x43000 ParentDllBase: 0x7fffa7450000 OriginalBase: 0x7fff9ae20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12843ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12864ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OnDemandBrokerClient.dll DLLBase: 0x7fff8e4c0000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff909c0000 OriginalBase: 0x7fff8e4c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13615ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1224: FullDllName: C:\WINDOWS\system32\fontdrvhost.exe DLLBase: 0x7ff6837a0000 SizeOfImage: 0xca000 ParentDllBase: 0x0 OriginalBase: 0x7ff6837a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff6837a0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7ff6837a0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled 1232: FullDllName: C:\WINDOWS\system32\fontdrvhost.exe DLLBase: 0x7ff6837a0000 SizeOfImage: 0xca000 ParentDllBase: 0x0 OriginalBase: 0x7ff6837a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff6837a0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7ff6837a0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled 1328: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\rpcepmap.dll DLLBase: 0x7fffa74d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\RpcRtRemote.dll DLLBase: 0x7fffa74a0000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\rpcss.dll DLLBase: 0x7fffa7500000 SizeOfImage: 0x16b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7500000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\FirewallAPI.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fffa74a0000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wshhyperv.dll DLLBase: 0x7fffa70e0000 SizeOfImage: 0x7000 ParentDllBase: 0x0 OriginalBase: 0x7fffa70e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffad7d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3710ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3712ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3712ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3712ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\fwpuclnt.dll DLLBase: 0x7fffa0590000 SizeOfImage: 0x86000 ParentDllBase: 0x7fffa74a0000 OriginalBase: 0x7fffa0590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3832ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+8789ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+8800ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11612ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12321ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12410ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12558ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\daxexec.dll DLLBase: 0x7fff900a0000 SizeOfImage: 0x11d000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fff900a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12615ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\container.dll DLLBase: 0x7fff90040000 SizeOfImage: 0x52000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff90040000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12615ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffa7500000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+28505ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+28505ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1372: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\lsm.dll DLLBase: 0x7fffa7200000 SizeOfImage: 0xed000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7200000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wshhyperv.dll DLLBase: 0x7fffa70e0000 SizeOfImage: 0x7000 ParentDllBase: 0x0 OriginalBase: 0x7fffa70e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SYSNTFY.dll DLLBase: 0x7fffa7010000 SizeOfImage: 0xe000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffa7010000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa6e50000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\Userenv.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+102ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\lsmproxy.dll DLLBase: 0x7fffa4450000 SizeOfImage: 0x11000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+112ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\utcapi.dll DLLBase: 0x7fffaa830000 SizeOfImage: 0xe000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa830000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3537ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\AppXAllUserStore.dll DLLBase: 0x7fffa9bb0000 SizeOfImage: 0x71000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11263ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11268ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11272ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11284ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa7200000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11540ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1464: FullDllName: C:\WINDOWS\system32\LogonUI.exe DLLBase: 0x7ff662dc0000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7ff662dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff662dc0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff662dc0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff662dc0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\logoncontroller.dll DLLBase: 0x7fffa6a20000 SizeOfImage: 0xe5000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CredProvCommonCore.DLL DLLBase: 0x7fffa6a00000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffa6a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SLC.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+32ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7fffa6ce0000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+32ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shacct.dll DLLBase: 0x7fffa4b80000 SizeOfImage: 0x29000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4b80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+34ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa4b80000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa4b80000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\audioses.dll DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3561ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MMDevApi.dll DLLBase: 0x7fffa0200000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0200000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3563ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3563ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3565ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3565ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\AVRT.dll DLLBase: 0x7fffa3350000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff9f940000 OriginalBase: 0x7fffa3350000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3573ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\Windows.UI.Logon.dll DLLBase: 0x7fff99dd0000 SizeOfImage: 0x405000 ParentDllBase: 0x0 OriginalBase: 0x7fff99dd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff99dd0000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wincorlib.DLL DLLBase: 0x7fff9aae0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff99dd0000 OriginalBase: 0x7fff9aae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa6a20000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.XamlHost.dll DLLBase: 0x7fff9abb0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9abb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\languageoverlayutil.dll DLLBase: 0x7fff9a980000 SizeOfImage: 0x43000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a980000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4193ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4209ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4209ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4209ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4209ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4209ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4224ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4240ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4240ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\inputhost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4256ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4271ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4271ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4271ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4271ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4271ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4290ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\FontGlyphAnimator.dll DLLBase: 0x7fff9ffd0000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ffd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4319ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4319ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CredProvDataModel.dll DLLBase: 0x7fff9f760000 SizeOfImage: 0xac000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f760000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NetworkIcon.dll DLLBase: 0x7fff9fc40000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fc40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff98a00000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4335ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NetworkUXBroker.dll DLLBase: 0x7fff9f6c0000 SizeOfImage: 0x8f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f6c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowscodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DAMediaManager.dll DLLBase: 0x7fff9ffa0000 SizeOfImage: 0x24000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ffa0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\EthernetMediaManager.dll DLLBase: 0x7fff9f520000 SizeOfImage: 0x67000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f520000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\credprovhost.dll DLLBase: 0x7fff9f330000 SizeOfImage: 0x7e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f330000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff9f330000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NcaApi.dll DLLBase: 0x7fff9ff90000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff9ffa0000 OriginalBase: 0x7fff9ff90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dot3api.dll DLLBase: 0x7fff9f690000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9f520000 OriginalBase: 0x7fff9f690000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff9f690000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\credprovs.dll DLLBase: 0x7fff9f2c0000 SizeOfImage: 0x6d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f2c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\credprovslegacy.dll DLLBase: 0x7fff9f280000 SizeOfImage: 0x38000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f280000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Devices.Sensors.dll DLLBase: 0x7fff97fa0000 SizeOfImage: 0x176000 ParentDllBase: 0x0 OriginalBase: 0x7fff97fa0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\FaceCredentialProvider.dll DLLBase: 0x7fff97ef0000 SizeOfImage: 0xaa000 ParentDllBase: 0x0 OriginalBase: 0x7fff97ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9f520000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4366ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4366ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\Windows.Media.dll DLLBase: 0x7fff97860000 SizeOfImage: 0x68c000 ParentDllBase: 0x0 OriginalBase: 0x7fff97860000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MFPlat.DLL DLLBase: 0x7fff97630000 SizeOfImage: 0x21e000 ParentDllBase: 0x7fff97ef0000 OriginalBase: 0x7fff97630000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4381ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RTWorkQ.DLL DLLBase: 0x7fff975e0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff97630000 OriginalBase: 0x7fff975e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4382ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4384ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SmartcardCredentialProvider.dll DLLBase: 0x7fff97510000 SizeOfImage: 0xbf000 ParentDllBase: 0x0 OriginalBase: 0x7fff97510000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4384ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4389ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\BioCredProv.dll DLLBase: 0x7fff97490000 SizeOfImage: 0x76000 ParentDllBase: 0x0 OriginalBase: 0x7fff97490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4389ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\threadpoolwinrt.dll DLLBase: 0x7fff9f160000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f160000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4389ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\cxcredprov.dll DLLBase: 0x7fff97450000 SizeOfImage: 0x31000 ParentDllBase: 0x0 OriginalBase: 0x7fff97450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4389ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll DLLBase: 0x7fff973a0000 SizeOfImage: 0xa5000 ParentDllBase: 0x0 OriginalBase: 0x7fff973a0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ngccredprov.dll DLLBase: 0x7fff972d0000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fff972d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rdpcredentialprovider.dll DLLBase: 0x7fff9f140000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f140000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wlidcredprov.dll DLLBase: 0x7fff97270000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fff97270000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rasplap.dll DLLBase: 0x7fff9ac60000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ac60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rtutils.dll DLLBase: 0x7fff9aac0000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff9ac60000 OriginalBase: 0x7fff9aac0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CredProv2faHelper.dll DLLBase: 0x7fff97240000 SizeOfImage: 0x22000 ParentDllBase: 0x0 OriginalBase: 0x7fff97240000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4398ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CredProvHelper.dll DLLBase: 0x7fff97210000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fff97210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4408ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IDStore.dll DLLBase: 0x7fff971e0000 SizeOfImage: 0x2c000 ParentDllBase: 0x0 OriginalBase: 0x7fff971e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4414ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa4b80000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4414ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Wldp.dll DLLBase: 0x7fffa9960000 SizeOfImage: 0x6b000 ParentDllBase: 0x7fff97210000 OriginalBase: 0x7fffa9960000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4414ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winbio.dll DLLBase: 0x7fff97190000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fff97ef0000 OriginalBase: 0x7fff97190000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4430ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff9ac60000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4430ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ngckeyenum.dll DLLBase: 0x7fff97140000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fff972d0000 OriginalBase: 0x7fff97140000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4430ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.UI.BioFeedback.dll DLLBase: 0x7fff96f80000 SizeOfImage: 0x1b0000 ParentDllBase: 0x0 OriginalBase: 0x7fff96f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4446ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1472: FullDllName: C:\WINDOWS\system32\dwm.exe DLLBase: 0x7ff6bf270000 SizeOfImage: 0x24000 ParentDllBase: 0x0 OriginalBase: 0x7ff6bf270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20aac4 ImageDll InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2cabcc ImageDll LoadNotificationsSent InLegacyLists InIndexes ShimDll InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmredir.dll DLLBase: 0x7fffa69b0000 SizeOfImage: 0x45000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa69b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\udwm.dll DLLBase: 0x7fffa6860000 SizeOfImage: 0x13f000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa6860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dwmcore.dll DLLBase: 0x7fffa62e0000 SizeOfImage: 0x447000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa62e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DWrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WindowsCodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\D3DCOMPILER_47.dll DLLBase: 0x7fffa4f70000 SizeOfImage: 0x47f000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa4f70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa4f70000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+28ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+32ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7030000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+32ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+48ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\avrt.dll DLLBase: 0x7fffa3350000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3350000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+100ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\ism.dll DLLBase: 0x7fffa30b0000 SizeOfImage: 0x291000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa30b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+104ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+104ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+104ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+104ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+104ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+106ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffa2dc0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+106ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+108ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+110ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dwmghost.dll DLLBase: 0x7fffa2da0000 SizeOfImage: 0x18000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa2da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+111ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+111ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowmanagementapi.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+115ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+117ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+125ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+129ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\imagehlp.dll DLLBase: 0x7fffac000000 SizeOfImage: 0x20000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffac000000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+133ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DispBroker.dll DLLBase: 0x7fffa23c0000 SizeOfImage: 0x96000 ParentDllBase: 0x0 OriginalBase: 0x7fffa23c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+150ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DispBroker.Desktop.dll DLLBase: 0x7fffa2280000 SizeOfImage: 0xfa000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2280000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+152ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+163ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\gameinput.dll DLLBase: 0x7fffa1d90000 SizeOfImage: 0x68000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3379ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3385ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Gaming.Input.dll DLLBase: 0x7fffa1ab0000 SizeOfImage: 0xe0000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1ab0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3387ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3391ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\UIAnimation.dll DLLBase: 0x7fffa1740000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1740000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3395ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3407ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mscms.dll DLLBase: 0x7fffa0d70000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0d70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3409ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3413ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3417ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1540: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\gpsvc.dll DLLBase: 0x7fffa4910000 SizeOfImage: 0x14f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4910000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa4910000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa4910000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SYSNTFY.dll DLLBase: 0x7fffa7010000 SizeOfImage: 0xe000 ParentDllBase: 0x7fffa4910000 OriginalBase: 0x7fffa7010000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa4910000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffaa870000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa41b0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa4910000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemprox.dll DLLBase: 0x7fff94b20000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff94b20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x8000 LoadTime: 2025-12-02T11:34:47Z (+11170ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wbemcomn.dll DLLBase: 0x7fff9c260000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fff94b20000 OriginalBase: 0x7fff9c260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11170ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemsvc.dll DLLBase: 0x7fff95b60000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff95b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11174ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\fastprox.dll DLLBase: 0x7fff94840000 SizeOfImage: 0xf0000 ParentDllBase: 0x0 OriginalBase: 0x7fff94840000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\amsi.dll DLLBase: 0x7fffa0890000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0890000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa0890000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll DLLBase: 0x7fffa0670000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1556: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cryptsvc.dll DLLBase: 0x7fffa4750000 SizeOfImage: 0x26000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4750000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa4750000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa4750000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\crypttpmeksvc.dll DLLBase: 0x7fffa4680000 SizeOfImage: 0x18000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa4680000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\cryptcatsvc.dll DLLBase: 0x7fffa4470000 SizeOfImage: 0x39000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4470000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\webauthn.dll DLLBase: 0x7fffa4280000 SizeOfImage: 0x1c9000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4280000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa4280000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa4280000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fffa4280000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\vssapi.dll DLLBase: 0x7fffa1ba0000 SizeOfImage: 0x17d000 ParentDllBase: 0x7fffa4470000 OriginalBase: 0x7fffa1ba0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3746ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\VssTrace.DLL DLLBase: 0x7fffa1a90000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa1a90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3746ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3757ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3757ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3757ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3759ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ES.DLL DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3762ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3776ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ESENT.dll DLLBase: 0x7fff9b3c0000 SizeOfImage: 0x422000 ParentDllBase: 0x7fffa4470000 OriginalBase: 0x7fff9b3c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+5206ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+5221ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffa4680000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+8312ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+8314ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PCPKsp.dll DLLBase: 0x7fff9f3c0000 SizeOfImage: 0x128000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f3c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+8314ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\tbs.dll DLLBase: 0x7fffa3940000 SizeOfImage: 0x19000 ParentDllBase: 0x7fff9f3c0000 OriginalBase: 0x7fffa3940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+8314ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll DLLBase: 0x7fff9ded0000 SizeOfImage: 0x1bb000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ded0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13468ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7fff9ded0000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13468ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9ded0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13468ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13470ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13470ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15497ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15497ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+15497ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+15497ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+15652ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:09Z (+32706ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:09Z (+32706ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:09Z (+32715ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1564: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\termsrv.dll DLLBase: 0x7fffa4780000 SizeOfImage: 0x13e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4780000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\lsmproxy.dll DLLBase: 0x7fffa4450000 SizeOfImage: 0x11000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffaa870000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\REGAPI.dll DLLBase: 0x7fffa4160000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffa4160000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rdpcorets.dll DLLBase: 0x7fffa3ea0000 SizeOfImage: 0x1c6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3ea0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\tlscsp.dll DLLBase: 0x7fffa3e20000 SizeOfImage: 0x11000 ParentDllBase: 0x7fffa3ea0000 OriginalBase: 0x7fffa3e20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa3ea0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\RDPBASE.dll DLLBase: 0x7fffa3c40000 SizeOfImage: 0x1d2000 ParentDllBase: 0x7fffa3ea0000 OriginalBase: 0x7fffa3c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+41ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\RDPSERVERBASE.dll DLLBase: 0x7fffa3960000 SizeOfImage: 0x239000 ParentDllBase: 0x7fffa3ea0000 OriginalBase: 0x7fffa3960000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+41ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa3ea0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\umb.dll DLLBase: 0x7fffa38c0000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa38c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa3ea0000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SETUPAPI.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x7fffa38c0000 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+55ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+113ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+115ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6701ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6701ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6708ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+6708ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MF.dll DLLBase: 0x7fffa8c00000 SizeOfImage: 0x87000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8c00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6788ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MFCORE.DLL DLLBase: 0x7fff95070000 SizeOfImage: 0x40f000 ParentDllBase: 0x7fffa8c00000 OriginalBase: 0x7fff95070000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6788ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MFPlat.dll DLLBase: 0x7fff97630000 SizeOfImage: 0x21e000 ParentDllBase: 0x0 OriginalBase: 0x7fff97630000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6800ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RTWorkQ.DLL DLLBase: 0x7fff975e0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff97630000 OriginalBase: 0x7fff975e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6800ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\mfh264enc.dll DLLBase: 0x7fffa8850000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6804ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa4780000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11350ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11350ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11371ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1576: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\printdeviceconfigurationservice.dll DLLBase: 0x7fffa48d0000 SizeOfImage: 0x36000 ParentDllBase: 0x0 OriginalBase: 0x7fffa48d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1600: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bdesvc.dll DLLBase: 0x7fffa46a0000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffa46a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcd.dll DLLBase: 0x7fffa9920000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa9920000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wevtapi.dll DLLBase: 0x7fffa4620000 SizeOfImage: 0x53000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa4620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\FVEAPI.dll DLLBase: 0x7fffa44d0000 SizeOfImage: 0x141000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa44d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\FVECERTS.dll DLLBase: 0x7fffa44b0000 SizeOfImage: 0x11000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa44b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa44b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\tbs.dll DLLBase: 0x7fffa3940000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa44d0000 OriginalBase: 0x7fffa3940000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3427ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3590ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3592ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3600ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+3600ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+3600ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fffa46a0000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11170ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11170ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11175ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IDStore.dll DLLBase: 0x7fff971e0000 SizeOfImage: 0x2c000 ParentDllBase: 0x0 OriginalBase: 0x7fff971e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11175ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff971e0000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11175ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wlidprov.dll DLLBase: 0x7fff94020000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff94020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11175ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1808: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\schedsvc.dll DLLBase: 0x7fffa4070000 SizeOfImage: 0xe8000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4070000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+23ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UBPM.dll DLLBase: 0x7fffa3e40000 SizeOfImage: 0x4f000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa3e40000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\EventAggregation.dll DLLBase: 0x7fffaa5f0000 SizeOfImage: 0x18000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffaa5f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\AUTHZ.dll DLLBase: 0x7fffa83a0000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa83a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\POWRPROF.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WMICLNT.dll DLLBase: 0x7fffa38e0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa38e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\taskcomp.dll DLLBase: 0x7fffa3850000 SizeOfImage: 0x67000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa3850000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CSystemEventsBrokerClient.dll DLLBase: 0x7fffa36d0000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffa36d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\TimeBrokerClient.dll DLLBase: 0x7fffa3640000 SizeOfImage: 0x10000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffa3640000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+52ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WPTaskScheduler.dll DLLBase: 0x7fffa3390000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3390000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+65ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa3390000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+67ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DABAPI.dll DLLBase: 0x7fffa6c10000 SizeOfImage: 0x8000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffa6c10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+85ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+99ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wevtapi.dll DLLBase: 0x7fffa4620000 SizeOfImage: 0x53000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa4620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3345ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3411ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3512ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa4070000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3514ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fffa3e40000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11465ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11513ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1840: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncbservice.dll DLLBase: 0x7fffa3660000 SizeOfImage: 0x64000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3660000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\BrokerLib.dll DLLBase: 0x7fffa6c50000 SizeOfImage: 0x35000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffa6c50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\httpprxc.dll DLLBase: 0x7fffa3630000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffa3630000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+36ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bi.dll DLLBase: 0x7fffa3620000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffa3620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+44ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3451ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.devices.radios.dll DLLBase: 0x7fffa0070000 SizeOfImage: 0x37000 ParentDllBase: 0x7fffa3660000 OriginalBase: 0x7fffa0070000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3455ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa0070000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3455ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa0070000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3455ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\BthRadioMedia.dll DLLBase: 0x7fff9ff00000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ff00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3461ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9ff00000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3461ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bluetoothapis.dll DLLBase: 0x7fff9feb0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff9ff00000 OriginalBase: 0x7fff9feb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3463ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11492ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11494ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11496ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11496ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11500ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11505ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\Bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11521ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1852: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profsvc.dll DLLBase: 0x7fffa3ba0000 SizeOfImage: 0x92000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3ba0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SYSNTFY.dll DLLBase: 0x7fffa7010000 SizeOfImage: 0xe000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffa7010000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profsvcext.dll DLLBase: 0x7fffa3900000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffa3900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11044ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11044ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\logoncli.dll DLLBase: 0x7fffa9360000 SizeOfImage: 0x46000 ParentDllBase: 0x7fffa3900000 OriginalBase: 0x7fffa9360000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11044ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa9360000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11044ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11080ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa3ba0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11115ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.dll DLLBase: 0x7fff940d0000 SizeOfImage: 0x2d7000 ParentDllBase: 0x0 OriginalBase: 0x7fff940d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11115ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff940d0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11115ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IDStore.dll DLLBase: 0x7fff971e0000 SizeOfImage: 0x2c000 ParentDllBase: 0x0 OriginalBase: 0x7fff971e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shacctprofile.dll DLLBase: 0x7fffa9c30000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9c30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa9c30000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa9c30000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fffa9c30000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11123ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1940: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\usermgr.dll DLLBase: 0x7fffa36e0000 SizeOfImage: 0x15e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa36e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+38ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3313ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+10990ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11006ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11006ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11355ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11359ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11359ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11359ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11359ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa36e0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12831ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2000: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\coremessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2008: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+-2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\timebrokerserver.dll DLLBase: 0x7fffa33f0000 SizeOfImage: 0x2e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa33f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\BrokerLib.dll DLLBase: 0x7fffa6c50000 SizeOfImage: 0x35000 ParentDllBase: 0x7fffa33f0000 OriginalBase: 0x7fffa6c50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\POWRPROF.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa33f0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bi.dll DLLBase: 0x7fffa3620000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa6c50000 OriginalBase: 0x7fffa3620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3346ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11453ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11457ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11457ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11459ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11459ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11486ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11488ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2016: (ERROR 5) 1368: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\umrdp.dll DLLBase: 0x7fffa2d30000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2d30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\setupapi.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x7fffa2d30000 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+30ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\umb.dll DLLBase: 0x7fffa38c0000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa38c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa2d30000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7097ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa2d30000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7100ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSPOOL.DRV DLLBase: 0x7fffa9af0000 SizeOfImage: 0xb7000 ParentDllBase: 0x7fffa2d30000 OriginalBase: 0x7fffa9af0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11090ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa9af0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11090ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\printui.dll DLLBase: 0x7fff922e0000 SizeOfImage: 0xc7000 ParentDllBase: 0x0 OriginalBase: 0x7fff922e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11209ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff922e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11214ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff922e0000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11214ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11214ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff922e0000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11216ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\puiapi.dll DLLBase: 0x7fff92290000 SizeOfImage: 0x48000 ParentDllBase: 0x7fff922e0000 OriginalBase: 0x7fff92290000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11219ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\Comctl32.dll DLLBase: 0x7fff91bf0000 SizeOfImage: 0x29a000 ParentDllBase: 0x0 OriginalBase: 0x7fff91bf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11230ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x1028a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff922e0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+11969ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+11977ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+11979ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1716: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\nsisvc.dll DLLBase: 0x7fffa2510000 SizeOfImage: 0xf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2510000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa2510000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3287ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 2080: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvc.dll DLLBase: 0x7fffa2550000 SizeOfImage: 0x52000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2550000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2088: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvc.dll DLLBase: 0x7fffa2550000 SizeOfImage: 0x52000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2550000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netjoin.dll DLLBase: 0x7fffa2380000 SizeOfImage: 0x34000 ParentDllBase: 0x7fffa24c0000 OriginalBase: 0x7fffa2380000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+44ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\JoinUtil.dll DLLBase: 0x7fffa98d0000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa98d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+46ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+50ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll DLLBase: 0x7fffa2230000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2230000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2096: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvc.dll DLLBase: 0x7fffa2550000 SizeOfImage: 0x52000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2550000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+42ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2132: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvcext.dll DLLBase: 0x7fffa24e0000 SizeOfImage: 0x24000 ParentDllBase: 0x0 OriginalBase: 0x7fffa24e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa24e0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa24e0000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+33ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+33ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+40ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\vmrdvcore.dll DLLBase: 0x7fffa2080000 SizeOfImage: 0x75000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3267ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3273ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3277ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2156: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvc.dll DLLBase: 0x7fffa2550000 SizeOfImage: 0x52000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2550000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+34ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2228: (ERROR 5) 2240: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvcvss.dll DLLBase: 0x7fffa2460000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2460000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa2460000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\vss_ps.dll DLLBase: 0x7fffa0570000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0570000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3349ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2248: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+1ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\icsvc.dll DLLBase: 0x7fffa2550000 SizeOfImage: 0x52000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2550000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa2550000 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+24ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2316: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wpdbusenum.dll DLLBase: 0x7fffa2020000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2020000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa2020000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PortableDeviceApi.dll DLLBase: 0x7fffa2180000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2180000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3245ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SETUPAPI.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x7fffa2020000 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3246ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\cfgmgr32.DLL DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffad2e0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3246ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3246ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\portabledeviceconnectapi.dll DLLBase: 0x7fffa2060000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3250ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3250ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3252ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3252ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa2020000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3252ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3252ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa2020000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3252ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa2020000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3255ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3257ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2444: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\certprop.dll DLLBase: 0x7fffa2240000 SizeOfImage: 0x3a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2240000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WinSCard.dll DLLBase: 0x7fffa2100000 SizeOfImage: 0x42000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fffa2100000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3227ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3229ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa2100000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3231ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3231ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3231ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11022ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11072ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11117ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cryptngc.dll DLLBase: 0x7fff92440000 SizeOfImage: 0x87000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fff92440000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11117ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11173ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11175ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11175ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\scksp.dll DLLBase: 0x7fff92240000 SizeOfImage: 0x4c000 ParentDllBase: 0x0 OriginalBase: 0x7fff92240000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff92240000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+11180ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\credui.dll DLLBase: 0x7fff92220000 SizeOfImage: 0x1c000 ParentDllBase: 0x7fff92240000 OriginalBase: 0x7fff92220000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11180ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ncryptprov.dll DLLBase: 0x7fff95fe0000 SizeOfImage: 0x8e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95fe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11189ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11285ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11289ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+11290ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\gdiplus.dll DLLBase: 0x7fff8de50000 SizeOfImage: 0x1df000 ParentDllBase: 0x7fffa2240000 OriginalBase: 0x7fff8de50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+11522ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x102ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\system32\WindowsCodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+11545ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa4d20000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+11559ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2480: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:36Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:36Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netprofmsvc.dll DLLBase: 0x7fffa1e00000 SizeOfImage: 0x212000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1e00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3230ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3232ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa8270000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3232ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3244ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3246ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3248ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3248ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncsi.dll DLLBase: 0x7fffa1790000 SizeOfImage: 0xb6000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffa1790000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3252ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fffa1790000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3264ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3266ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3270ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msv1_0.DLL DLLBase: 0x7fffa9510000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9510000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3274ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa9510000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3274ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NtlmShared.dll DLLBase: 0x7fffa94f0000 SizeOfImage: 0x17000 ParentDllBase: 0x7fffa9510000 OriginalBase: 0x7fffa94f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3274ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WlanApi.dll DLLBase: 0x7fffa0c00000 SizeOfImage: 0x8e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0c00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3278ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fffa0c00000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3278ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wevtapi.dll DLLBase: 0x7fffa4620000 SizeOfImage: 0x53000 ParentDllBase: 0x7fffa1790000 OriginalBase: 0x7fffa4620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3280ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3282ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa1790000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3282ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3282ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3284ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3284ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netjoin.dll DLLBase: 0x7fffa2380000 SizeOfImage: 0x34000 ParentDllBase: 0x7fffa24c0000 OriginalBase: 0x7fffa2380000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3285ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\JoinUtil.dll DLLBase: 0x7fffa98d0000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa98d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3285ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3287ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3289ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa1790000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3289ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffaa870000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3291ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa1790000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3341ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3343ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa1e00000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3345ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ssdpapi.dll DLLBase: 0x7fffa01e0000 SizeOfImage: 0x18000 ParentDllBase: 0x0 OriginalBase: 0x7fffa01e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3347ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\computenetwork.dll DLLBase: 0x7fffa0180000 SizeOfImage: 0x20000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0180000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3351ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3353ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13340ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+17034ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2572: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dispbroker.desktop.dll DLLBase: 0x7fffa2280000 SizeOfImage: 0xfa000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2280000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+16ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+294ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2676: FullDllName: C:\WINDOWS\system32\vssvc.exe DLLBase: 0x7ff64dcc0000 SizeOfImage: 0x169000 ParentDllBase: 0x0 OriginalBase: 0x7ff64dcc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff64dcc0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\VSSAPI.DLL DLLBase: 0x7fffa1ba0000 SizeOfImage: 0x17d000 ParentDllBase: 0x7ff64dcc0000 OriginalBase: 0x7fffa1ba0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\VssTrace.DLL DLLBase: 0x7fffa1a90000 SizeOfImage: 0x19000 ParentDllBase: 0x7ff64dcc0000 OriginalBase: 0x7fffa1a90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff64dcc0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff64dcc0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+49ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+49ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+49ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+49ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ES.DLL DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+61ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\amsi.dll DLLBase: 0x7fffa0890000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0890000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa0890000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+71ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+71ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll DLLBase: 0x7fffa0670000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+77ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+79ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+81ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\vss_ps.dll DLLBase: 0x7fffa0570000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0570000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+83ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+87ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+87ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+87ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+101ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\catsrvut.dll DLLBase: 0x7fffa00f0000 SizeOfImage: 0x81000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+109ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MfcSubs.dll DLLBase: 0x7fffa00d0000 SizeOfImage: 0xe000 ParentDllBase: 0x7fffa00f0000 OriginalBase: 0x7fffa00d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+109ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2764: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wkssvc.dll DLLBase: 0x7fffa0b90000 SizeOfImage: 0x61000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0b90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+22ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+28ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netjoin.dll DLLBase: 0x7fffa2380000 SizeOfImage: 0x34000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffa2380000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\JOINUTIL.DLL DLLBase: 0x7fffa98d0000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa98d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+42ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa0b90000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+44ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2776: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wevtsvc.dll DLLBase: 0x7fffa0e40000 SizeOfImage: 0x132000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0e40000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa0e40000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa0e40000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa0e40000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0e40000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+145ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa0e40000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+147ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+147ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2784: (ERROR 5) 2844: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\es.dll DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2856: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\themeservice.dll DLLBase: 0x7fffa0a10000 SizeOfImage: 0x1e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa0a10000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa0a10000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7668ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2864: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\sysmain.dll DLLBase: 0x7fffa0910000 SizeOfImage: 0xf8000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0910000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\POWRPROF.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+103ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+103ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+103ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+105ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0910000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+257ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2184: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\sessenv.dll DLLBase: 0x7fffa07f0000 SizeOfImage: 0x9d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa07f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SYSNTFY.dll DLLBase: 0x7fffa7010000 SizeOfImage: 0xe000 ParentDllBase: 0x7fffa07f0000 OriginalBase: 0x7fffa7010000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa07f0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa07f0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RdvVmTransport.dll DLLBase: 0x7fffa0650000 SizeOfImage: 0x1c000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa0650000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+27ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\vmbuspipe.dll DLLBase: 0x7fffa2530000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2530000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+27ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa2530000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa07f0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa07f0000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffaa610000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2204: (ERROR 5) 2588: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+1ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dnsrslvr.dll DLLBase: 0x7fffa0720000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0720000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa0720000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffa0720000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa8270000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Fwpuclnt.dll DLLBase: 0x7fffa0590000 SizeOfImage: 0x86000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0590000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa0720000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa0720000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffa0720000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fffa0720000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3076: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+1ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\sens.dll DLLBase: 0x7fffa07d0000 SizeOfImage: 0x18000 ParentDllBase: 0x0 OriginalBase: 0x7fffa07d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa07d0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SYSNTFY.dll DLLBase: 0x7fffa7010000 SizeOfImage: 0xe000 ParentDllBase: 0x7fffa07d0000 OriginalBase: 0x7fffa7010000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa07d0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7960ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7960ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7962ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ES.DLL DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7962ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7966ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7966ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffaa710000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7966ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7968ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8014ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3172: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\fntcache.dll DLLBase: 0x7fffa0360000 SizeOfImage: 0x162000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0360000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa0360000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0360000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+24ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\FontProvider.dll DLLBase: 0x7fffa01b0000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa01b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa0360000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+758ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1376ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+1376ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 3180: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\audioendpointbuilder.dll DLLBase: 0x7fffa02b0000 SizeOfImage: 0xa6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa02b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MMDevApi.dll DLLBase: 0x7fffa0200000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0200000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+22ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa02b0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa02b0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\rdpendp.dll DLLBase: 0x7fffa8e30000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7725ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7730ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7732ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7745ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3436: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\audiosrv.dll DLLBase: 0x7fff9fca0000 SizeOfImage: 0x1ff000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\AUDIOSRVPOLICYMANAGER.dll DLLBase: 0x7fff9fff0000 SizeOfImage: 0x78000 ParentDllBase: 0x7fff9fca0000 OriginalBase: 0x7fff9fff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MMDevApi.dll DLLBase: 0x7fffa0200000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0200000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+24ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9fca0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffaa870000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff9fff0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9fff0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9fff0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+36ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\coreaudiopolicymanagerext.dll DLLBase: 0x7fffa1700000 SizeOfImage: 0xa000 ParentDllBase: 0x7fff9fca0000 OriginalBase: 0x7fffa1700000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9fff0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7684ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AudioSes.dll DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8123ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\rdpendp.dll DLLBase: 0x7fffa8e30000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9523ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9525ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9527ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9fca0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9531ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Media.Devices.dll DLLBase: 0x7fff82df0000 SizeOfImage: 0xf3000 ParentDllBase: 0x0 OriginalBase: 0x7fff82df0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9531ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CompPkgSup.DLL DLLBase: 0x7fff82b60000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fff9fca0000 OriginalBase: 0x7fff82b60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9542ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9544ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9546ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9546ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9546ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+31601ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+31601ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff90400000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+31601ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\HrtfApo.dll DLLBase: 0x7fff62d50000 SizeOfImage: 0x28000 ParentDllBase: 0x7fff9fca0000 OriginalBase: 0x7fff62d50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+31616ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Perception.Stub.dll DLLBase: 0x7fff62a90000 SizeOfImage: 0xcd000 ParentDllBase: 0x0 OriginalBase: 0x7fff62a90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+31626ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3540: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\tabsvc.dll DLLBase: 0x7fff9ff40000 SizeOfImage: 0x43000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ff40000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\HID.DLL DLLBase: 0x7fffa7ee0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9ff40000 OriginalBase: 0x7fffa7ee0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9ff40000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9ff40000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3636: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dusmsvc.dll DLLBase: 0x7fff9f810000 SizeOfImage: 0x79000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f810000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9f810000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:44Z (+5028ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9f810000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+5028ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:44Z (+5028ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+5028ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9f810000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:53Z (+13825ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SrumAPI.dll DLLBase: 0x7fff9ae00000 SizeOfImage: 0x15000 ParentDllBase: 0x7fff9f810000 OriginalBase: 0x7fff9ae00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13825ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13825ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:53Z (+13840ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3644: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dhcpcore.dll DLLBase: 0x7fff9f1e0000 SizeOfImage: 0x6f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f1e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+67ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:39Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dhcpcore6.dll DLLBase: 0x7fff9f0e0000 SizeOfImage: 0x4e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f0e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa8270000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:39Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+75ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9f1e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+75ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3780: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\winhttp.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa95b0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3828: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wcmsvc.dll DLLBase: 0x7fff9ef70000 SizeOfImage: 0x161000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ef70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff9ef70000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9ef70000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9ef70000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9ef70000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff9ef70000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cmintegrator.dll DLLBase: 0x7fff9ef00000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff9ef70000 OriginalBase: 0x7fff9ef00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wcmcsp.dll DLLBase: 0x7fff9eeb0000 SizeOfImage: 0x41000 ParentDllBase: 0x0 OriginalBase: 0x7fff9eeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3856: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\shsvcs.dll DLLBase: 0x7fff9ef20000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ef20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff9ef20000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9ef20000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9ef20000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\FVEAPI.dll DLLBase: 0x7fffa44d0000 SizeOfImage: 0x141000 ParentDllBase: 0x7fff9ef20000 OriginalBase: 0x7fffa44d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\tbs.dll DLLBase: 0x7fffa3940000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa44d0000 OriginalBase: 0x7fffa3940000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa44d0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ProximityService.dll DLLBase: 0x7fff9e7b0000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e7b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9e7b0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff9e7b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9ef20000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ProximityCommon.dll DLLBase: 0x7fff9e6e0000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9e7b0000 OriginalBase: 0x7fff9e6e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ProximityCommonPal.dll DLLBase: 0x7fff9ff30000 SizeOfImage: 0xa000 ParentDllBase: 0x7fff9e6e0000 OriginalBase: 0x7fff9ff30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ProximityServicePAL.dll DLLBase: 0x7fff9cf90000 SizeOfImage: 0x20000 ParentDllBase: 0x7fff9e7b0000 OriginalBase: 0x7fff9cf90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9cf90000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+54ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fff9cf90000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+54ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+54ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9cf90000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+56ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+56ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\Rmapi.dll DLLBase: 0x7fff9cef0000 SizeOfImage: 0x3d000 ParentDllBase: 0x7fff9ef20000 OriginalBase: 0x7fff9cef0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+58ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\HID.DLL DLLBase: 0x7fffa7ee0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9cef0000 OriginalBase: 0x7fffa7ee0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+60ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8036ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 4012: FullDllName: C:\WINDOWS\System32\spoolsv.exe DLLBase: 0x7ff628d50000 SizeOfImage: 0xf8000 ParentDllBase: 0x0 OriginalBase: 0x7ff628d50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa8270000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3517ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3517ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7515ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7517ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\fwpuclnt.dll DLLBase: 0x7fffa0590000 SizeOfImage: 0x86000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7518ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\localspl.dll DLLBase: 0x7fffa8ca0000 SizeOfImage: 0x183000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7520ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SPOOLSS.DLL DLLBase: 0x7fff95cc0000 SizeOfImage: 0x32000 ParentDllBase: 0x7fffa8ca0000 OriginalBase: 0x7fff95cc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7520ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\winspool.drv DLLBase: 0x7fffa9af0000 SizeOfImage: 0xb7000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9af0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7520ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa9af0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7520ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa9af0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7520ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PrintIsolationProxy.dll DLLBase: 0x7fff93ff0000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fff93ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7533ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\AppMon.dll DLLBase: 0x7fff92ad0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff92ad0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7536ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\tcpmon.dll DLLBase: 0x7fff92a70000 SizeOfImage: 0x52000 ParentDllBase: 0x0 OriginalBase: 0x7fff92a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7536ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\snmpapi.dll DLLBase: 0x7fff92860000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff92a70000 OriginalBase: 0x7fff92860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7540ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wsnmp32.dll DLLBase: 0x7fff92840000 SizeOfImage: 0x19000 ParentDllBase: 0x7fff92a70000 OriginalBase: 0x7fff92840000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7540ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\usbmon.dll DLLBase: 0x7fff926d0000 SizeOfImage: 0x163000 ParentDllBase: 0x0 OriginalBase: 0x7fff926d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7543ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7547ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7553ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7553ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7553ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\VirtualMon.dll DLLBase: 0x7fff92690000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fff92690000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7558ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff92690000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7559ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\APMon.dll DLLBase: 0x7fff924d0000 SizeOfImage: 0x1b4000 ParentDllBase: 0x0 OriginalBase: 0x7fff924d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7561ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7574ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msxml6.dll DLLBase: 0x7fff9a1e0000 SizeOfImage: 0x23d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a1e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7574ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SETUPAPI.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x7fffa8ca0000 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7585ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\drvstore.dll DLLBase: 0x7fff9c030000 SizeOfImage: 0x17c000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7589ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\spool\PRTPROCS\x64\winprint.dll DLLBase: 0x7fff92420000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff92420000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7594ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8ca0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7594ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7594ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32spl.dll DLLBase: 0x7fff91e90000 SizeOfImage: 0x174000 ParentDllBase: 0x0 OriginalBase: 0x7fff91e90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7610ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\inetpp.dll DLLBase: 0x7fff923d0000 SizeOfImage: 0x43000 ParentDllBase: 0x0 OriginalBase: 0x7fff923d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7618ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa8ca0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7624ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7ff628d50000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7624ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7624ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\cscapi.dll DLLBase: 0x7fff923b0000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7fff923b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7626ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7626ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa8ca0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7628ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff923d0000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7661ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\spool\DRIVERS\x64\3\tsprint.dll DLLBase: 0x7fff91ad0000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91ad0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8006ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff91ad0000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8006ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bidispl.dll DLLBase: 0x7fff8a3c0000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a3c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8362ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8377ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8381ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 4068: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bfe.dll DLLBase: 0x7fff9e810000 SizeOfImage: 0x114000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e810000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9e810000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\AUTHZ.dll DLLBase: 0x7fffa83a0000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff9e810000 OriginalBase: 0x7fffa83a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9e810000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff9e810000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wevtapi.dll DLLBase: 0x7fffa4620000 SizeOfImage: 0x53000 ParentDllBase: 0x7fff9e810000 OriginalBase: 0x7fffa4620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\mpssvc.dll DLLBase: 0x7fff9d190000 SizeOfImage: 0x169000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+61ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\embeddedmodesvcapi.dll DLLBase: 0x7fffa70c0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffa8030000 OriginalBase: 0x7fffa70c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+75ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\fwpuclnt.dll DLLBase: 0x7fffa0590000 SizeOfImage: 0x86000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffa0590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\FWPolicyIOMgr.dll DLLBase: 0x7fff9de50000 SizeOfImage: 0x6f000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fff9de50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+89ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+92ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+97ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\httpprxc.dll DLLBase: 0x7fffa3630000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffa3630000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+176ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+176ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+176ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+176ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\adhapi.dll DLLBase: 0x7fff9b3b0000 SizeOfImage: 0xc000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b3b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+180ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+182ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+184ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+184ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+186ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+186ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+188ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wfapigp.dll DLLBase: 0x7fff9b350000 SizeOfImage: 0xe000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b350000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+194ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+302ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+302ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+302ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+318ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff9cfc0000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+320ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+322ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+950ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1004ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1016ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff9d190000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3457ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3304: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\windows.staterepository.dll DLLBase: 0x7fff9c870000 SizeOfImage: 0x50e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9c870000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\StateRepository.Core.dll DLLBase: 0x7fff9c5b0000 SizeOfImage: 0xc7000 ParentDllBase: 0x7fff9c870000 OriginalBase: 0x7fff9c5b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff9c870000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+793ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+816ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+816ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff9c870000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8217ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8219ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3532: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\diagtrack.dll DLLBase: 0x7fff9d9a0000 SizeOfImage: 0x4a5000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d9a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\tdh.dll DLLBase: 0x7fff9e090000 SizeOfImage: 0x77000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fff9e090000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+55ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+61ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+79ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+81ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+83ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+85ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+87ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+816ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+825ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff96d20000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+825ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+825ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+840ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+840ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+862ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DiagnosticDataSettings.dll DLLBase: 0x7fffaa1d0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffaa1d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+868ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+878ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffaa870000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+878ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffabc00000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+880ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffabc00000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+880ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+880ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+894ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll DLLBase: 0x7fffa99d0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffa99d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+894ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wldp.dll DLLBase: 0x7fffa9960000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9960000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Netapi32.dll DLLBase: 0x7fff95f70000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fff95f70000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DSREG.DLL DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\winsqlite3.dll DLLBase: 0x7fff96a90000 SizeOfImage: 0x104000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fff96a90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+904ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+920ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+920ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\FlightSettings.dll DLLBase: 0x7fff9a750000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a750000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+920ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\fcon.dll DLLBase: 0x7fff9f590000 SizeOfImage: 0xc3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+920ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+920ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+955ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+955ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+958ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+986ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\aepic.dll DLLBase: 0x7fff95ab0000 SizeOfImage: 0x9d000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fff95ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1258ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+1270ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WindowsPerformanceRecorderControl.dll DLLBase: 0x7fff95b80000 SizeOfImage: 0x13d000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fff95b80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1270ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+1270ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wshhyperv.dll DLLBase: 0x7fffa70e0000 SizeOfImage: 0x7000 ParentDllBase: 0x0 OriginalBase: 0x7fffa70e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1270ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\sfc.dll DLLBase: 0x15bb16a0000 SizeOfImage: 0x3000 ParentDllBase: 0x0 OriginalBase: 0x180000000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\sfc_os.DLL DLLBase: 0x7fff9f660000 SizeOfImage: 0xa000 ParentDllBase: 0x15bb16a0000 OriginalBase: 0x7fff9f660000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1293ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ServicingCommon.dll DLLBase: 0x7fffaa620000 SizeOfImage: 0xe1000 ParentDllBase: 0x7fff9f660000 OriginalBase: 0x7fffaa620000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1293ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff95b80000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1293ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1302ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+1302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll DLLBase: 0x7fff9ac80000 SizeOfImage: 0xe4000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ac80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:42Z (+2822ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.DLL DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:42Z (+2822ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\OneSettingsClient.dll DLLBase: 0x7fffa9130000 SizeOfImage: 0x31000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffa9130000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:42Z (+2853ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fffa9130000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:42Z (+2853ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wosc.dll DLLBase: 0x7fff9fbb0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fbb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+2903ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+2934ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+2945ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\webio.dll DLLBase: 0x7fffa9060000 SizeOfImage: 0xc3000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa9060000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa95b0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+2948ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9d9a0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7752ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7752ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7756ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7759ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7761ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7782ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\vaultcli.dll DLLBase: 0x7fff8eae0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8eae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7857ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3516: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\iphlpsvc.dll DLLBase: 0x7fff9d070000 SizeOfImage: 0xdc000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d070000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\MSWSOCK.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\fwpuclnt.dll DLLBase: 0x7fffa0590000 SizeOfImage: 0x86000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa0590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa95b0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\httpprxm.dll DLLBase: 0x7fff9bd40000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\adhsvc.dll DLLBase: 0x7fff9bca0000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bca0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WLDAP32.dll DLLBase: 0x7fffabad0000 SizeOfImage: 0x7c000 ParentDllBase: 0x7fff9bca0000 OriginalBase: 0x7fffabad0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9bca0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\FirewallAPI.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fff9bca0000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\httpprxc.dll DLLBase: 0x7fffa3630000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa3630000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9bd40000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff9bca0000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff9bd40000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9bca0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: c:\windows\system32\WMICLNT.dll DLLBase: 0x7fffa38e0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa38e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fff9d070000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\logoncli.dll DLLBase: 0x7fffa9360000 SizeOfImage: 0x46000 ParentDllBase: 0x7fffabad0000 OriginalBase: 0x7fffa9360000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\FWPolicyIOMgr.dll DLLBase: 0x7fff9de50000 SizeOfImage: 0x6f000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fff9de50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff9bca0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+944ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\authz.dll DLLBase: 0x7fffa83a0000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffa83a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+947ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+947ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7428ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+7428ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3120: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dps.dll DLLBase: 0x7fff9d150000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d150000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa41b0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9d150000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wdi.dll DLLBase: 0x7fff9bc70000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fff9d150000 OriginalBase: 0x7fff9bc70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\diagperf.dll DLLBase: 0x7fff9b0f0000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b0f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\pnpts.dll DLLBase: 0x7fff9b300000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b300000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+67ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\pots.dll DLLBase: 0x7fff9b260000 SizeOfImage: 0x10000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff9b260000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9b260000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\tdh.dll DLLBase: 0x7fff9e090000 SizeOfImage: 0x77000 ParentDllBase: 0x7fff9b260000 OriginalBase: 0x7fff9e090000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+71ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\srumsvc.dll DLLBase: 0x7fff9b7f0000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b7f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+95ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9b7f0000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+95ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ESENT.dll DLLBase: 0x7fff9b3c0000 SizeOfImage: 0x422000 ParentDllBase: 0x7fff9b7f0000 OriginalBase: 0x7fff9b3c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+97ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+119ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+119ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\eeprov.dll DLLBase: 0x7fff9e3e0000 SizeOfImage: 0x5e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e3e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+138ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9e3e0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+140ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9e3e0000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+140ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+140ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\vfuprov.dll DLLBase: 0x7fff9b880000 SizeOfImage: 0x20000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b880000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+142ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9b880000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+142ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\nduprov.dll DLLBase: 0x7fff9ae20000 SizeOfImage: 0x43000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ae20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+144ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wpnsruprov.dll DLLBase: 0x7fff9b320000 SizeOfImage: 0x2c000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b320000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+153ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\appsruprov.dll DLLBase: 0x7fff9b220000 SizeOfImage: 0x36000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b220000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+156ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ncuprov.dll DLLBase: 0x7fff9b860000 SizeOfImage: 0xf000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+181ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9b860000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+181ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+181ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\energyprov.dll DLLBase: 0x7fff9ad90000 SizeOfImage: 0x6a000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ad90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+185ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9ad90000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+189ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+191ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\srumapi.dll DLLBase: 0x7fff9ae00000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ae00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+197ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+197ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\radardt.dll DLLBase: 0x7fff8a280000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a280000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8308ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:00Z (+19875ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3588: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\trkwks.dll DLLBase: 0x7fff9d340000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d340000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3740: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wpnservice.dll DLLBase: 0x7fff9d010000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d010000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wpncore.dll DLLBase: 0x7fff9be90000 SizeOfImage: 0x194000 ParentDllBase: 0x0 OriginalBase: 0x7fff9be90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff9d010000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7880ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7882ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3804: (ERROR 5) 1008: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wbem\wmisvc.dll DLLBase: 0x7fff9d300000 SizeOfImage: 0x3a000 ParentDllBase: 0x0 OriginalBase: 0x7fff9d300000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wbemcomn.dll DLLBase: 0x7fff9c260000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fff9d300000 OriginalBase: 0x7fff9c260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WMICLNT.dll DLLBase: 0x7fffa38e0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fff9d300000 OriginalBase: 0x7fffa38e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9d300000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:42Z (+2004ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\vssapi.dll DLLBase: 0x7fffa1ba0000 SizeOfImage: 0x17d000 ParentDllBase: 0x7fff9d300000 OriginalBase: 0x7fffa1ba0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3796ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\VssTrace.DLL DLLBase: 0x7fffa1a90000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa1a90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3796ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3796ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3796ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3796ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ES.DLL DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3819ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3841ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemcore.dll DLLBase: 0x7fff94940000 SizeOfImage: 0x1d0000 ParentDllBase: 0x0 OriginalBase: 0x7fff94940000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3845ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\esscli.dll DLLBase: 0x7fff947d0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff94940000 OriginalBase: 0x7fff947d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3847ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\FastProx.dll DLLBase: 0x7fff94840000 SizeOfImage: 0xf0000 ParentDllBase: 0x7fff94940000 OriginalBase: 0x7fff94840000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+3849ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemsvc.dll DLLBase: 0x7fff95b60000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff95b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+3861ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\authZ.dll DLLBase: 0x7fffa83a0000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fffa83a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+3868ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wmiutils.dll DLLBase: 0x7fff947a0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff947a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+3881ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\repdrvfs.dll DLLBase: 0x7fff94730000 SizeOfImage: 0x67000 ParentDllBase: 0x0 OriginalBase: 0x7fff94730000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+3891ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\amsi.dll DLLBase: 0x7fffa0890000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0890000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4868ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa0890000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4868ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+4874ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll DLLBase: 0x7fffa0670000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4874ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4874ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4874ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4874ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wmiprvsd.dll DLLBase: 0x7fff92990000 SizeOfImage: 0xcf000 ParentDllBase: 0x0 OriginalBase: 0x7fff92990000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4874ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NCObjAPI.DLL DLLBase: 0x7fff95a00000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff92990000 OriginalBase: 0x7fff95a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4889ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemess.dll DLLBase: 0x7fff92910000 SizeOfImage: 0x77000 ParentDllBase: 0x0 OriginalBase: 0x7fff92910000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4889ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff92910000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4905ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4905ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+4905ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff92990000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+12659ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff92990000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+12659ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 4004: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wsaifabrichost.dll DLLBase: 0x7fff9c1b0000 SizeOfImage: 0xac000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c1b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9c1b0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff9c1b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff9c1b0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\drvstore.dll DLLBase: 0x7fff9c030000 SizeOfImage: 0x17c000 ParentDllBase: 0x7fff9c1b0000 OriginalBase: 0x7fff9c030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+864ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+864ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 2852: (ERROR 5) 4224: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\srvsvc.dll DLLBase: 0x7fff9bcc0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bcc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SSCORE.DLL DLLBase: 0x7fff9b0d0000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b0d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sscoreext.dll DLLBase: 0x7fff9b0c0000 SizeOfImage: 0xa000 ParentDllBase: 0x7fff9b0d0000 OriginalBase: 0x7fff9b0c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mi.dll DLLBase: 0x7fff9b090000 SizeOfImage: 0x27000 ParentDllBase: 0x7fff9b0c0000 OriginalBase: 0x7fff9b090000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\miutils.dll DLLBase: 0x7fff9b020000 SizeOfImage: 0x61000 ParentDllBase: 0x7fff9b090000 OriginalBase: 0x7fff9b020000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wmidcom.dll DLLBase: 0x7fff9bc30000 SizeOfImage: 0x34000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bc30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\FirewallAPI.DLL DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\RESUTILS.DLL DLLBase: 0x7fff9b280000 SizeOfImage: 0x6f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b280000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CLUSAPI.DLL DLLBase: 0x7fff9ae70000 SizeOfImage: 0x143000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ae70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9ae70000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+46ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa95b0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa8270000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9bcc0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 4632: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wlidsvc.dll DLLBase: 0x7fff9a420000 SizeOfImage: 0x1f6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a420000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+32ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+34ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msxml6.dll DLLBase: 0x7fff9a1e0000 SizeOfImage: 0x23d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a1e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DPAPI.DLL DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+61ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+61ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+61ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PCPKsp.dll DLLBase: 0x7fff9f3c0000 SizeOfImage: 0x128000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f3c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\tbs.dll DLLBase: 0x7fffa3940000 SizeOfImage: 0x19000 ParentDllBase: 0x7fff9f3c0000 OriginalBase: 0x7fffa3940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+122ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+138ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+509ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+518ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff96d20000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+518ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+518ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+533ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+533ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+555ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gamestreamingext.dll DLLBase: 0x7fff9fc30000 SizeOfImage: 0x8000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fff9fc30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+559ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msauserext.dll DLLBase: 0x7fff961c0000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fff961c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+559ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\popkeycli.dll DLLBase: 0x7fff96190000 SizeOfImage: 0x1e000 ParentDllBase: 0x7fff9a420000 OriginalBase: 0x7fff96190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+561ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+806ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 4744: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\rmapi.dll DLLBase: 0x7fff9cef0000 SizeOfImage: 0x3d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9cef0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\HID.DLL DLLBase: 0x7fffa7ee0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff9cef0000 OriginalBase: 0x7fffa7ee0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9cef0000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WwanRadioManager.dll DLLBase: 0x7fff9f670000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wwapi.dll DLLBase: 0x7fff9f1a0000 SizeOfImage: 0x31000 ParentDllBase: 0x7fff9f670000 OriginalBase: 0x7fff9f1a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff9f1a0000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\XboxGipRadioManager.dll DLLBase: 0x7fff9f500000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f500000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\NfcRadioMedia.dll DLLBase: 0x7fff9f260000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WlanRadioManager.dll DLLBase: 0x7fff9f180000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f180000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wlanapi.dll DLLBase: 0x7fffa0c00000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff9f180000 OriginalBase: 0x7fffa0c00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\BthRadioMedia.dll DLLBase: 0x7fff9ff00000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ff00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bluetoothapis.dll DLLBase: 0x7fff9feb0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff9ff00000 OriginalBase: 0x7fff9feb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9feb0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 4880: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\capabilityaccessmanager.dll DLLBase: 0x7fff96ba0000 SizeOfImage: 0x175000 ParentDllBase: 0x0 OriginalBase: 0x7fff96ba0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\winsqlite3.dll DLLBase: 0x7fff96a90000 SizeOfImage: 0x104000 ParentDllBase: 0x7fff96ba0000 OriginalBase: 0x7fff96a90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff96ba0000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capabilityaccessmanager.desktop.storage.dll DLLBase: 0x7fff96350000 SizeOfImage: 0x14c000 ParentDllBase: 0x7fff96ba0000 OriginalBase: 0x7fff96350000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff96350000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:40Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CapabilityAccessManagerClient.dll DLLBase: 0x7fff86c40000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8046ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8050ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fff96ba0000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8082ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wifidatacapabilityhandler.dll DLLBase: 0x7fff678d0000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff678d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+13800ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\cellulardatacapabilityhandler.dll DLLBase: 0x7fff678b0000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff678b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+13800ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 4888: (ERROR 5) 5068: FullDllName: C:\WINDOWS\System32\AggregatorHost.exe DLLBase: 0x7ff7a4450000 SizeOfImage: 0x55000 ParentDllBase: 0x0 OriginalBase: 0x7ff7a4450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff7a4450000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff7a4450000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UpdateReboot.dll DLLBase: 0x7fff95f40000 SizeOfImage: 0x28000 ParentDllBase: 0x0 OriginalBase: 0x7fff95f40000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MpeCm.dll DLLBase: 0x7fff95ef0000 SizeOfImage: 0x42000 ParentDllBase: 0x0 OriginalBase: 0x7fff95ef0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fff95ef0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff95ef0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DiagnosticDataQuery.dll DLLBase: 0x7fff95e80000 SizeOfImage: 0x18000 ParentDllBase: 0x7fff95ef0000 OriginalBase: 0x7fff95e80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MediaFoundationAggregator.dll DLLBase: 0x7fff95e50000 SizeOfImage: 0x27000 ParentDllBase: 0x0 OriginalBase: 0x7fff95e50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CodeIntegrityAggregator.dll DLLBase: 0x7fff95e00000 SizeOfImage: 0x40000 ParentDllBase: 0x0 OriginalBase: 0x7fff95e00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff95e00000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MissionControlAggregator.dll DLLBase: 0x7fff95dc0000 SizeOfImage: 0x35000 ParentDllBase: 0x0 OriginalBase: 0x7fff95dc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa0ac0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wusys.dll DLLBase: 0x7fffa08b0000 SizeOfImage: 0x54000 ParentDllBase: 0x0 OriginalBase: 0x7fffa08b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\uus\packages\preview\AMD64\uusbrain.dll DLLBase: 0x7fff9a9d0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a9d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\uus\packages\preview\AMD64\UusFailover.dll DLLBase: 0x7fff95d70000 SizeOfImage: 0x4c000 ParentDllBase: 0x0 OriginalBase: 0x7fff95d70000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\uus\packages\preview\AMD64\UpdatePlatformAggregators.dll DLLBase: 0x7fff95d00000 SizeOfImage: 0x64000 ParentDllBase: 0x0 OriginalBase: 0x7fff95d00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff7a4450000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+301ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:41Z (+301ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+301ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff95e00000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+349ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:41Z (+349ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 764: (ERROR 5) 1176: FullDllName: C:\WINDOWS\system32\winlogon.exe DLLBase: 0x7ff78c060000 SizeOfImage: 0xf2000 ParentDllBase: 0x0 OriginalBase: 0x7ff78c060000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\utcapi.dll DLLBase: 0x7fffaa830000 SizeOfImage: 0xe000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa830000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+350ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+365ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+365ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profext.dll DLLBase: 0x7fffa8140000 SizeOfImage: 0x31000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffa8140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+365ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+365ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fffa8140000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+365ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+365ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\uxinit.dll DLLBase: 0x7fffa6dc0000 SizeOfImage: 0x32000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa6dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+381ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UxTheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x7fffa6dc0000 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+381ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+381ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dwminit.dll DLLBase: 0x7fffa6be0000 SizeOfImage: 0x22000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa6be0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+381ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+413ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+446ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+448ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4285ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\camext.dll DLLBase: 0x7fffaa180000 SizeOfImage: 0xa000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fffaa180000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa6dc0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4310ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MPR.dll DLLBase: 0x7fff9d370000 SizeOfImage: 0x21000 ParentDllBase: 0x7ff78c060000 OriginalBase: 0x7fff9d370000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4658ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 5340: FullDllName: C:\WINDOWS\system32\fontdrvhost.exe DLLBase: 0x7ff6837a0000 SizeOfImage: 0xca000 ParentDllBase: 0x0 OriginalBase: 0x7ff6837a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff6837a0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7ff6837a0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled 5348: FullDllName: C:\Windows\System32\WUDFHost.exe DLLBase: 0x7ff7037f0000 SizeOfImage: 0x54000 ParentDllBase: 0x0 OriginalBase: 0x7ff7037f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff7037f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WUDFPlatform.dll DLLBase: 0x7fffa8220000 SizeOfImage: 0x3f000 ParentDllBase: 0x7ff7037f0000 OriginalBase: 0x7fffa8220000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x0 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\driverstore\filerepository\rdpidd.inf_amd64_449e893f6a845b9b\rdpidd.dll DLLBase: 0x7fffa8b00000 SizeOfImage: 0x70000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8b00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+52ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+58ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+58ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+58ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+58ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+60ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+60ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+60ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WppRecorderUM.dll DLLBase: 0x7fffa9000000 SizeOfImage: 0x11000 ParentDllBase: 0x7fffa8b00000 OriginalBase: 0x7fffa9000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+60ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+62ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+62ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+62ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dbghelp.dll DLLBase: 0x7fffaa2f0000 SizeOfImage: 0x241000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa2f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffaa2f0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+69ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WUDFx02000.dll DLLBase: 0x7fff94ee0000 SizeOfImage: 0xd2000 ParentDllBase: 0x0 OriginalBase: 0x7fff94ee0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+79ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\drivers\umdf\iddcx.dll DLLBase: 0x7fffa8a80000 SizeOfImage: 0x7c000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8a80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+103ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DWrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x7fffa8a80000 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+105ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+105ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RdpAvenc.dll DLLBase: 0x7fff94ea0000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fff94ea0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+182ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff94ea0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+184ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff94ea0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+184ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+270ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 5384: FullDllName: C:\WINDOWS\system32\dwm.exe DLLBase: 0x7ff6bf270000 SizeOfImage: 0x24000 ParentDllBase: 0x0 OriginalBase: 0x7ff6bf270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20aac4 ImageDll InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2cabcc ImageDll LoadNotificationsSent InLegacyLists InIndexes ShimDll InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmredir.dll DLLBase: 0x7fffa69b0000 SizeOfImage: 0x45000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa69b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\udwm.dll DLLBase: 0x7fffa6860000 SizeOfImage: 0x13f000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffa6860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dwmcore.dll DLLBase: 0x7fffa62e0000 SizeOfImage: 0x447000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa62e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa69b0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DWrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WindowsCodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+9ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\D3DCOMPILER_47.dll DLLBase: 0x7fffa4f70000 SizeOfImage: 0x47f000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa4f70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa4f70000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7030000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\avrt.dll DLLBase: 0x7fffa3350000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3350000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\ism.dll DLLBase: 0x7fffa30b0000 SizeOfImage: 0x291000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fffa30b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fffa30b0000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffa2dc0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+39ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dwmghost.dll DLLBase: 0x7fffa2da0000 SizeOfImage: 0x18000 ParentDllBase: 0x7ff6bf270000 OriginalBase: 0x7fffa2da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowmanagementapi.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6860000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\imagehlp.dll DLLBase: 0x7fffac000000 SizeOfImage: 0x20000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffac000000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DispBroker.dll DLLBase: 0x7fffa23c0000 SizeOfImage: 0x96000 ParentDllBase: 0x0 OriginalBase: 0x7fffa23c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+55ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DispBroker.Desktop.dll DLLBase: 0x7fffa2280000 SizeOfImage: 0xfa000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2280000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+55ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\UIAnimation.dll DLLBase: 0x7fffa1740000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1740000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+61ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\gameinput.dll DLLBase: 0x7fffa1d90000 SizeOfImage: 0x68000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+83ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+85ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Gaming.Input.dll DLLBase: 0x7fffa1ab0000 SizeOfImage: 0xe0000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1ab0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+87ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+89ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+89ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+165ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wuceffects.dll DLLBase: 0x7fff866b0000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fffa62e0000 OriginalBase: 0x7fff866b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+5531ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffa5670000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+5812ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Cabinet.dll DLLBase: 0x7fff878b0000 SizeOfImage: 0x2a000 ParentDllBase: 0x7fffa5670000 OriginalBase: 0x7fff878b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+5817ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:09Z (+25567ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 5744: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\scdeviceenum.dll DLLBase: 0x7fffa8810000 SizeOfImage: 0x33000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8810000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WinSCard.dll DLLBase: 0x7fffa2100000 SizeOfImage: 0x42000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffa2100000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa8810000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVRTL.dll DLLBase: 0x7fffa9170000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffa9170000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3946ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 5936: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\devicesetupmanager.dll DLLBase: 0x7fff94bd0000 SizeOfImage: 0x79000 ParentDllBase: 0x0 OriginalBase: 0x7fff94bd0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff94bd0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+33ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff94bd0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+33ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DEVRTL.dll DLLBase: 0x7fffa9170000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff94bd0000 OriginalBase: 0x7fffa9170000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+33ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff94bd0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff94bd0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+79ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DeviceDriverRetrievalClient.dll DLLBase: 0x7fffa8fc0000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8fc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+95ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DeviceSoftwareInstallationClient.dll DLLBase: 0x7fff94b80000 SizeOfImage: 0x40000 ParentDllBase: 0x0 OriginalBase: 0x7fff94b80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+110ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DevPropMgr.dll DLLBase: 0x7fff94b40000 SizeOfImage: 0x3d000 ParentDllBase: 0x0 OriginalBase: 0x7fff94b40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+127ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fff94b40000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+137ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DDORes.dll DLLBase: 0x7fffa87f0000 SizeOfImage: 0xf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa87f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+145ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemprox.dll DLLBase: 0x7fff94b20000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff94b20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x8000 LoadTime: 2025-12-02T11:34:43Z (+164ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wbemcomn.dll DLLBase: 0x7fff9c260000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fff94b20000 OriginalBase: 0x7fff9c260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:43Z (+164ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemsvc.dll DLLBase: 0x7fff95b60000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff95b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:44Z (+243ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\fastprox.dll DLLBase: 0x7fff94840000 SizeOfImage: 0xf0000 ParentDllBase: 0x0 OriginalBase: 0x7fff94840000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\amsi.dll DLLBase: 0x7fffa0890000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0890000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa0890000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpOav.dll DLLBase: 0x7fffa0670000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa0670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1291ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff94b40000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1454ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DeviceMetadataRetrievalClient.dll DLLBase: 0x7fff92880000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff92880000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+1479ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\setupapi.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x0 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3843ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\drvstore.dll DLLBase: 0x7fff9c030000 SizeOfImage: 0x17c000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3843ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SPINF.dll DLLBase: 0x7fffa2150000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2150000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3843ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3849ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3849ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3854ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3854ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 5480: FullDllName: C:\WINDOWS\system32\wbem\wmiprvse.exe DLLBase: 0x7ff7b0770000 SizeOfImage: 0x7d000 ParentDllBase: 0x0 OriginalBase: 0x7ff7b0770000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\FastProx.dll DLLBase: 0x7fff94840000 SizeOfImage: 0xf0000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fff94840000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fff94840000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NCObjAPI.DLL DLLBase: 0x7fff95a00000 SizeOfImage: 0x17000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fff95a00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wbemcomn.dll DLLBase: 0x7fff9c260000 SizeOfImage: 0x7a000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fff9c260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemprox.dll DLLBase: 0x7fff94b20000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff94b20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x8000 LoadTime: 2025-12-02T11:34:45Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemsvc.dll DLLBase: 0x7fff95b60000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff95b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wmiutils.dll DLLBase: 0x7fff947a0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff947a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wmiprov.dll DLLBase: 0x7fff928b0000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fff928b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+30ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\esscli.dll DLLBase: 0x7fff947d0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff928b0000 OriginalBase: 0x7fff947d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WMICLNT.dll DLLBase: 0x7fffa38e0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fff928b0000 OriginalBase: 0x7fffa38e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+146ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 5368: FullDllName: C:\WINDOWS\system32\DllHost.exe DLLBase: 0x7ff611bb0000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7ff611bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff611bb0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff611bb0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:45Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DeviceMetadataRetrievalClient.dll DLLBase: 0x7fff92880000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff92880000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVRTL.dll DLLBase: 0x7fffa9170000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff92880000 OriginalBase: 0x7fffa9170000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff92880000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fff92880000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff92880000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:45Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 5456: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wersvc.dll DLLBase: 0x7fffa8e90000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8e90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\DiagnosticDataSettings.dll DLLBase: 0x7fffaa1d0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa8e90000 OriginalBase: 0x7fffaa1d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WindowsPerformanceRecorderControl.dll DLLBase: 0x7fff95b80000 SizeOfImage: 0x13d000 ParentDllBase: 0x7fffa8e90000 OriginalBase: 0x7fff95b80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WerEtw.dll DLLBase: 0x7fffa9020000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fffa8e90000 OriginalBase: 0x7fffa9020000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa9020000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa9020000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll DLLBase: 0x7fffa99d0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffaa1d0000 OriginalBase: 0x7fffa99d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wer.dll DLLBase: 0x7fffaa1f0000 SizeOfImage: 0xf6000 ParentDllBase: 0x7fffa8e90000 OriginalBase: 0x7fffaa1f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:46Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 3512: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\webthreatdefsvc.dll DLLBase: 0x7fffaa140000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa140000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffaa140000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fffaa140000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fffaa140000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\omadmapi.dll DLLBase: 0x7fffaa100000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffaa100000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffaa140000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ThreatIntelligence.dll DLLBase: 0x7fffa9c70000 SizeOfImage: 0x6f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9c70000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa9c70000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\tdh.dll DLLBase: 0x7fff9e090000 SizeOfImage: 0x77000 ParentDllBase: 0x7fffa9c70000 OriginalBase: 0x7fff9e090000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTDHOST.dll DLLBase: 0x7fffa9c60000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa9c70000 OriginalBase: 0x7fffa9c60000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLE32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffaa140000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTDSENSOR.dll DLLBase: 0x7fffa9c50000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffa9c70000 OriginalBase: 0x7fffa9c50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\webthreatdefusersvc.dll DLLBase: 0x7fff91260000 SizeOfImage: 0x4a000 ParentDllBase: 0x0 OriginalBase: 0x7fff91260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+405ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 4928: FullDllName: C:\WINDOWS\System32\rdpclip.exe DLLBase: 0x7ff7c0ab0000 SizeOfImage: 0x8c000 ParentDllBase: 0x0 OriginalBase: 0x7ff7c0ab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0xca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinapi.dll DLLBase: 0x7fff92110000 SizeOfImage: 0xae000 ParentDllBase: 0x0 OriginalBase: 0x7fff92110000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+30ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+35ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+46ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+52ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffabd00000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winspool.drv DLLBase: 0x7fffa9af0000 SizeOfImage: 0xb7000 ParentDllBase: 0x7ff7c0ab0000 OriginalBase: 0x7fffa9af0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+675ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+675ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+679ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa9af0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+683ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 2792: FullDllName: C:\WINDOWS\system32\sihost.exe DLLBase: 0x7ff69c1b0000 SizeOfImage: 0x22000 ParentDllBase: 0x0 OriginalBase: 0x7ff69c1b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\desktopshellext.dll DLLBase: 0x7fff92010000 SizeOfImage: 0xa5000 ParentDllBase: 0x0 OriginalBase: 0x7fff92010000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff92010000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff92010000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff92010000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff92010000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff92010000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff92010000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\fcon.dll DLLBase: 0x7fff9f590000 SizeOfImage: 0xc3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+16ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+24ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ClipboardServer.dll DLLBase: 0x7fff91a20000 SizeOfImage: 0x37000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RMCLIENT.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff91a20000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\activationmanager.dll DLLBase: 0x7fff91920000 SizeOfImage: 0xef000 ParentDllBase: 0x0 OriginalBase: 0x7fff91920000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\AppointmentActivation.dll DLLBase: 0x7fff921f0000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fff921f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+36ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff91920000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\modernexecserver.dll DLLBase: 0x7fff911c0000 SizeOfImage: 0x8f000 ParentDllBase: 0x0 OriginalBase: 0x7fff911c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+51ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff911c0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+51ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7fff911c0000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+51ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff911c0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+65ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7ff69c1b0000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+67ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\system32\ExecModelClient.dll DLLBase: 0x7fff90e60000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff90e60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowmanagement.dll DLLBase: 0x7fff90bf0000 SizeOfImage: 0x268000 ParentDllBase: 0x0 OriginalBase: 0x7fff90bf0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+74ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NotificationPlatformComponent.dll DLLBase: 0x7fff907e0000 SizeOfImage: 0x11000 ParentDllBase: 0x0 OriginalBase: 0x7fff907e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+85ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppContracts.dll DLLBase: 0x7fff906d0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff906d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+89ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+91ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windows.system.launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+93ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff96d20000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+93ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+95ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PackageStateChangeHandler.dll DLLBase: 0x7fff90650000 SizeOfImage: 0x21000 ParentDllBase: 0x0 OriginalBase: 0x7fff90650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+97ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+110ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ShareHost.dll DLLBase: 0x7fff90340000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fff90340000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+123ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinui.appcore.dll DLLBase: 0x7fff901c0000 SizeOfImage: 0xcc000 ParentDllBase: 0x0 OriginalBase: 0x7fff901c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+127ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AudioSes.dll DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+139ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\daxexec.dll DLLBase: 0x7fff900a0000 SizeOfImage: 0x11d000 ParentDllBase: 0x0 OriginalBase: 0x7fff900a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\container.dll DLLBase: 0x7fff90040000 SizeOfImage: 0x52000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff90040000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+143ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mssrch.dll DLLBase: 0x7fff8fd40000 SizeOfImage: 0x2ef000 ParentDllBase: 0x0 OriginalBase: 0x7fff8fd40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+147ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\TQUERY.DLL DLLBase: 0x7fff8f9d0000 SizeOfImage: 0x366000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fff8f9d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+149ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff8f9d0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+149ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SearchIndexerCore.dll DLLBase: 0x7fff8f8e0000 SizeOfImage: 0xe4000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fff8f8e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+151ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+151ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreShellExtFramework.dll DLLBase: 0x7fff8f8a0000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff8f8a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+157ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinui.pcshell.dll DLLBase: 0x7fff8ef80000 SizeOfImage: 0x916000 ParentDllBase: 0x0 OriginalBase: 0x7fff8ef80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+159ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UIAutomationCore.DLL DLLBase: 0x7fff8eb40000 SizeOfImage: 0x431000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fff8eb40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+161ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wincorlib.DLL DLLBase: 0x7fff9aae0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fff9aae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+161ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+174ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+176ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\activationclient.dll DLLBase: 0x7fff8e930000 SizeOfImage: 0x2e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+176ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\omadmapi.dll DLLBase: 0x7fffaa100000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffaa100000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+197ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CloudExperienceHostCommon.dll DLLBase: 0x7fff91060000 SizeOfImage: 0x14e000 ParentDllBase: 0x0 OriginalBase: 0x7fff91060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+199ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+199ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+199ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+201ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DMCmnUtils.dll DLLBase: 0x7fff8e6e0000 SizeOfImage: 0xd5000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fff8e6e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+206ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+208ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+210ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+218ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+218ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+222ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+222ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+228ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+230ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+230ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+232ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+236ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+244ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+250ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+254ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+259ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\licensemanagerapi.dll DLLBase: 0x7fff90bc0000 SizeOfImage: 0x21000 ParentDllBase: 0x7fff901c0000 OriginalBase: 0x7fff90bc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+270ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fff90bc0000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+270ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+286ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+286ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+288ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+288ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shell32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+288ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MPR.dll DLLBase: 0x7fff9d370000 SizeOfImage: 0x21000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff9d370000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+293ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+376ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Integrity.dll DLLBase: 0x7fff90ba0000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ba0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+769ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryBroker.dll DLLBase: 0x7fff90460000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff90460000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1430ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1432ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1436ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1438ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 6220: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cdpusersvc.dll DLLBase: 0x7fff91860000 SizeOfImage: 0xb2000 ParentDllBase: 0x0 OriginalBase: 0x7fff91860000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff91860000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff91860000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff91860000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cdp.dll DLLBase: 0x7fff912b0000 SizeOfImage: 0x59f000 ParentDllBase: 0x7fff91860000 OriginalBase: 0x7fff912b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff91860000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff91860000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gamestreamingext.dll DLLBase: 0x7fff9fc30000 SizeOfImage: 0x8000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fff9fc30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff90ec0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+69ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+88ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+137ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+144ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+146ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+146ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+146ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ncryptprov.dll DLLBase: 0x7fff95fe0000 SizeOfImage: 0x8e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95fe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+146ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff95fe0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+152ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+295ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\vaultcli.dll DLLBase: 0x7fff8eae0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8eae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+305ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+314ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+316ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+318ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+322ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+322ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+324ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+324ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+324ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+324ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+327ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+327ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Devices.Radios.dll DLLBase: 0x7fffa0070000 SizeOfImage: 0x37000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0070000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1358ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\winsqlite3.dll DLLBase: 0x7fff96a90000 SizeOfImage: 0x104000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fff96a90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1463ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 6276: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\webthreatdefusersvc.dll DLLBase: 0x7fff91260000 SizeOfImage: 0x4a000 ParentDllBase: 0x0 OriginalBase: 0x7fff91260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ThreatResponseEngine.dll DLLBase: 0x7fff91030000 SizeOfImage: 0x27000 ParentDllBase: 0x0 OriginalBase: 0x7fff91030000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+84ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 6332: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wpnuserservice.dll DLLBase: 0x7fff91000000 SizeOfImage: 0x1e000 ParentDllBase: 0x0 OriginalBase: 0x7fff91000000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff91000000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wpncore.dll DLLBase: 0x7fff9be90000 SizeOfImage: 0x194000 ParentDllBase: 0x0 OriginalBase: 0x7fff9be90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NotificationController.dll DLLBase: 0x7fff90a40000 SizeOfImage: 0x150000 ParentDllBase: 0x0 OriginalBase: 0x7fff90a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff90a40000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff90a40000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RMCLIENT.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff90a40000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fff90a40000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff90a40000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff91000000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+32ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\QuietHours.dll DLLBase: 0x7fff904b0000 SizeOfImage: 0xad000 ParentDllBase: 0x0 OriginalBase: 0x7fff904b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+50ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff90a40000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+63ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+67ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+71ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+73ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\winsqlite3.dll DLLBase: 0x7fff96a90000 SizeOfImage: 0x104000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fff96a90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+81ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+116ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\execmodelclient.dll DLLBase: 0x7fff90e60000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff90e60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+124ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+128ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+130ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+152ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+152ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9be90000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+154ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TileDataRepository.dll DLLBase: 0x7fff8e540000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e540000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+156ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\StateRepository.Core.dll DLLBase: 0x7fff9c5b0000 SizeOfImage: 0xc7000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c5b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+156ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepository.dll DLLBase: 0x7fff9c870000 SizeOfImage: 0x50e000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c870000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+156ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9c870000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+156ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+160ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryClient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+168ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\appresolver.dll DLLBase: 0x7fff8e400000 SizeOfImage: 0xb6000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e400000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+179ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+181ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+181ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+185ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\threadpoolwinrt.dll DLLBase: 0x7fff9f160000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f160000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+188ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wpnapps.dll DLLBase: 0x7fff8dcf0000 SizeOfImage: 0x15a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8dcf0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+188ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.dll DLLBase: 0x7fff940d0000 SizeOfImage: 0x2d7000 ParentDllBase: 0x0 OriginalBase: 0x7fff940d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+192ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppExtension.dll DLLBase: 0x7fff91b10000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fff91b10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+194ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll DLLBase: 0x7fff8db70000 SizeOfImage: 0xf0000 ParentDllBase: 0x0 OriginalBase: 0x7fff8db70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+202ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NotificationControllerPS.dll DLLBase: 0x7fff8cfa0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cfa0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+230ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1567ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CapabilityAccessManagerClient.dll DLLBase: 0x7fff86c40000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+6876ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+6876ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wpnclient.dll DLLBase: 0x7fff82ae0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff82ae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+23050ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ContentDeliveryManager.Utilities.dll DLLBase: 0x7fff63d00000 SizeOfImage: 0x199000 ParentDllBase: 0x0 OriginalBase: 0x7fff63d00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+23058ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+23073ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msxml6.dll DLLBase: 0x7fff9a1e0000 SizeOfImage: 0x23d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a1e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+23073ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinapi.dll DLLBase: 0x7fff92110000 SizeOfImage: 0xae000 ParentDllBase: 0x0 OriginalBase: 0x7fff92110000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+23089ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 6392: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\tokenbroker.dll DLLBase: 0x7fff90820000 SizeOfImage: 0x196000 ParentDllBase: 0x0 OriginalBase: 0x7fff90820000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+19ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\TOKENBINDING.dll DLLBase: 0x7fff907c0000 SizeOfImage: 0x15000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fff907c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IDStore.dll DLLBase: 0x7fff971e0000 SizeOfImage: 0x2c000 ParentDllBase: 0x0 OriginalBase: 0x7fff971e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff971e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff971e0000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+40ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wlidprov.dll DLLBase: 0x7fff94020000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff94020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+40ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+42ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+46ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+46ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+46ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+46ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+48ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryBroker.dll DLLBase: 0x7fff90460000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff90460000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+51ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+75ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+75ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\vaultcli.dll DLLBase: 0x7fff8eae0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8eae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+206ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+210ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+210ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppContracts.dll DLLBase: 0x7fff906d0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff906d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1116ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\OnDemandBrokerClient.dll DLLBase: 0x7fff8e4c0000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fff8e4c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1118ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\RMCLIENT.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1120ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7fff90820000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1148ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1150ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1291ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1291ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowscodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1336ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+7271ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 6404: FullDllName: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe DLLBase: 0xe40000 SizeOfImage: 0x35000 ParentDllBase: 0x0 OriginalBase: 0xe4000000017000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2c4 ImageDll InLegacyLists InIndexes InExceptionTable FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64.dll DLLBase: 0x7fffad770000 SizeOfImage: 0x55000 ParentDllBase: 0x0 OriginalBase: 0x7fffad770000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64base.dll DLLBase: 0x7fffabbf0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffad770000 OriginalBase: 0x7fffabbf0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64win.dll DLLBase: 0x7fffac150000 SizeOfImage: 0x89000 ParentDllBase: 0x7fffad770000 OriginalBase: 0x7fffac150000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64con.dll DLLBase: 0x7fffabbd0000 SizeOfImage: 0x18000 ParentDllBase: 0x7fffad770000 OriginalBase: 0x7fffabbd0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wow64cpu.dll DLLBase: 0x77280000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x77280000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 6412: FullDllName: C:\WINDOWS\system32\taskhostw.exe DLLBase: 0x7ff7f25d0000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7ff7f25d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\imm32.dll DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PlaySndSrv.dll DLLBase: 0x7fff906a0000 SizeOfImage: 0x24000 ParentDllBase: 0x0 OriginalBase: 0x7fff906a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wininet.dll DLLBase: 0x7fff9e110000 SizeOfImage: 0x289000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e110000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MsCtfMonitor.dll DLLBase: 0x7fff9ee90000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ee90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MSUTB.dll DLLBase: 0x7fff9ee30000 SizeOfImage: 0x4f000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fff9ee30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ESENT.dll DLLBase: 0x7fff9b3c0000 SizeOfImage: 0x422000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fff9b3c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+88ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+90ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+90ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+99ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+99ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:47Z (+101ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+101ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+101ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:47Z (+101ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\AudioSes.DLL DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x7fff906a0000 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+126ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+128ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+7125ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 6688: (ERROR 5) 6752: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cdpsvc.dll DLLBase: 0x7fff8e5f0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e5f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff8e5f0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8e5f0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cdp.dll DLLBase: 0x7fff912b0000 SizeOfImage: 0x59f000 ParentDllBase: 0x7fff8e5f0000 OriginalBase: 0x7fff912b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff8e5f0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gamestreamingext.dll DLLBase: 0x7fff9fc30000 SizeOfImage: 0x8000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fff9fc30000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ncryptprov.dll DLLBase: 0x7fff95fe0000 SizeOfImage: 0x8e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95fe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff95fe0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+32ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ShareHost.dll DLLBase: 0x7fff90340000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fff90340000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff90340000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+46ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+48ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+50ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wshBth.dll DLLBase: 0x7fff920e0000 SizeOfImage: 0x20000 ParentDllBase: 0x0 OriginalBase: 0x7fff920e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+50ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\sbservicetrigger.dll DLLBase: 0x7fffa8c90000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa8c90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+52ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Devices.WiFiDirect.dll DLLBase: 0x7fff8dc70000 SizeOfImage: 0x75000 ParentDllBase: 0x0 OriginalBase: 0x7fff8dc70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+56ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wlanapi.dll DLLBase: 0x7fffa0c00000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa0c00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+56ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fffa0c00000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+58ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Devices.Radios.dll DLLBase: 0x7fffa0070000 SizeOfImage: 0x37000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0070000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+60ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+64ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+106ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+108ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+108ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+108ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+110ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+110ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 6796: FullDllName: C:\WINDOWS\Explorer.EXE DLLBase: 0x7ff656970000 SizeOfImage: 0x2e3000 ParentDllBase: 0x0 OriginalBase: 0x7ff656970000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\AEPIC.dll DLLBase: 0x7fff95ab0000 SizeOfImage: 0x9d000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fff95ab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WININET.dll DLLBase: 0x7fff9e110000 SizeOfImage: 0x289000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fff9e110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UxTheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mscms.dll DLLBase: 0x7fffa0d70000 SizeOfImage: 0xc9000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa0d70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NInput.dll DLLBase: 0x7fff91b60000 SizeOfImage: 0x86000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fff91b60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.dll DLLBase: 0x7fff91bf0000 SizeOfImage: 0x29a000 ParentDllBase: 0x0 OriginalBase: 0x7fff91bf0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x1028a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\appresolver.dll DLLBase: 0x7fff8e400000 SizeOfImage: 0xb6000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e400000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+30ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\StartTileData.dll DLLBase: 0x7fff8d600000 SizeOfImage: 0x560000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d600000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+69ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\languageoverlayutil.dll DLLBase: 0x7fff9a980000 SizeOfImage: 0x43000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a980000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+73ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.dll DLLBase: 0x7fff940d0000 SizeOfImage: 0x2d7000 ParentDllBase: 0x0 OriginalBase: 0x7fff940d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+73ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+75ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryClient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppExtension.dll DLLBase: 0x7fff91b10000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fff91b10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll DLLBase: 0x7fff8db70000 SizeOfImage: 0xf0000 ParentDllBase: 0x0 OriginalBase: 0x7fff8db70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+81ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IDStore.dll DLLBase: 0x7fff971e0000 SizeOfImage: 0x2c000 ParentDllBase: 0x0 OriginalBase: 0x7fff971e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+81ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff971e0000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+84ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wlidprov.dll DLLBase: 0x7fff94020000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff94020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+87ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+91ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+95ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+95ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+97ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DMCmnUtils.dll DLLBase: 0x7fff8e6e0000 SizeOfImage: 0xd5000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fff8e6e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+99ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+101ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+101ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+103ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff9ab50000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+105ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+107ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+113ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+118ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Taskbar.dll DLLBase: 0x7fff8c7f0000 SizeOfImage: 0x318000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c7f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+163ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff8c7f0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+163ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff8c7f0000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+163ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TWINAPI.dll DLLBase: 0x7fff92110000 SizeOfImage: 0xae000 ParentDllBase: 0x7fff8c7f0000 OriginalBase: 0x7fff92110000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+163ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+163ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+165ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+165ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SndVolSSO.DLL DLLBase: 0x7fff8c710000 SizeOfImage: 0x43000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fff8c710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+173ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MMDevAPI.DLL DLLBase: 0x7fffa0200000 SizeOfImage: 0xa2000 ParentDllBase: 0x7fff8c710000 OriginalBase: 0x7fffa0200000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+178ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+180ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rdpendp.dll DLLBase: 0x7fffa8e30000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+185ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OLEACC.dll DLLBase: 0x7fff8c590000 SizeOfImage: 0x7d000 ParentDllBase: 0x7fff8c7f0000 OriginalBase: 0x7fff8c590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+189ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\explorerframe.dll DLLBase: 0x7fff8c2c0000 SizeOfImage: 0x2c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c2c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+197ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+199ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SettingsHandlers_DesktopTaskbar.dll DLLBase: 0x7fff8c1b0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c1b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+223ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowscodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+233ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x7fff8c7f0000 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+249ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+249ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dataexchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+251ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinui.pcshell.dll DLLBase: 0x7fff8ef80000 SizeOfImage: 0x916000 ParentDllBase: 0x0 OriginalBase: 0x7fff8ef80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+255ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wincorlib.DLL DLLBase: 0x7fff9aae0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fff9aae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+255ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UIAutomationCore.DLL DLLBase: 0x7fff8eb40000 SizeOfImage: 0x431000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fff8eb40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+255ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll DLLBase: 0x7fff8c0b0000 SizeOfImage: 0xee000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c0b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+259ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\twinui.appcore.dll DLLBase: 0x7fff901c0000 SizeOfImage: 0xcc000 ParentDllBase: 0x0 OriginalBase: 0x7fff901c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+263ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinui.dll DLLBase: 0x7fff8bbb0000 SizeOfImage: 0x4fb000 ParentDllBase: 0x0 OriginalBase: 0x7fff8bbb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+265ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+277ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+277ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\FlightSettings.dll DLLBase: 0x7fff9a750000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a750000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+285ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+287ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cldapi.dll DLLBase: 0x7fff8bb70000 SizeOfImage: 0x2f000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff8bb70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+287ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\FLTLIB.DLL DLLBase: 0x7fffa8a70000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff8bb70000 OriginalBase: 0x7fffa8a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+289ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Wldp.dll DLLBase: 0x7fffa9960000 SizeOfImage: 0x6b000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa9960000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+303ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sppc.dll DLLBase: 0x7fffa3360000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa7f80000 OriginalBase: 0x7fffa3360000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+319ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+325ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+327ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ApplicationFrame.dll DLLBase: 0x7fff8a740000 SizeOfImage: 0xbc000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a740000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+333ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowmanagementapi.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Internal.ShellCommon.dll DLLBase: 0x7fff8a660000 SizeOfImage: 0xa8000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a660000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+337ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll DLLBase: 0x7fff973a0000 SizeOfImage: 0xa5000 ParentDllBase: 0x0 OriginalBase: 0x7fff973a0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+341ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\activationclient.dll DLLBase: 0x7fff8e930000 SizeOfImage: 0x2e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+343ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+364ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntshrui.dll DLLBase: 0x7fff8a560000 SizeOfImage: 0xad000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fff8a560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+375ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cscapi.dll DLLBase: 0x7fff923b0000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7fff923b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+377ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AboveLockAppHost.dll DLLBase: 0x7fff8a4f0000 SizeOfImage: 0x64000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a4f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+385ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\thumbcache.dll DLLBase: 0x7fff8a470000 SizeOfImage: 0x6f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a470000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+387ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff8bbb0000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+398ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Core.TextInput.dll DLLBase: 0x7fff94c50000 SizeOfImage: 0x16c000 ParentDllBase: 0x0 OriginalBase: 0x7fff94c50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+412ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.BlueLightReduction.dll DLLBase: 0x7fff89b60000 SizeOfImage: 0x72000 ParentDllBase: 0x0 OriginalBase: 0x7fff89b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+416ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+420ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TileDataRepository.dll DLLBase: 0x7fff8e540000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e540000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+420ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\StateRepository.Core.dll DLLBase: 0x7fff9c5b0000 SizeOfImage: 0xc7000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c5b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+420ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepository.dll DLLBase: 0x7fff9c870000 SizeOfImage: 0x50e000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c870000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+422ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\LINKINFO.dll DLLBase: 0x7fff91ab0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fff91ab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+422ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SyncCenter.dll DLLBase: 0x7fff89ad0000 SizeOfImage: 0x80000 ParentDllBase: 0x0 OriginalBase: 0x7fff89ad0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+422ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.FileExplorer.Common.dll DLLBase: 0x7fff89a00000 SizeOfImage: 0xc2000 ParentDllBase: 0x0 OriginalBase: 0x7fff89a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+434ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.UI.FileExplorer.dll DLLBase: 0x7fff89870000 SizeOfImage: 0x189000 ParentDllBase: 0x0 OriginalBase: 0x7fff89870000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+442ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WinUICohabitation.dll DLLBase: 0x7fff8e510000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff89870000 OriginalBase: 0x7fff8e510000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+444ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cdp.dll DLLBase: 0x7fff912b0000 SizeOfImage: 0x59f000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fff912b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+457ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff912b0000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+459ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Internal.UI.Shell.WindowTabManager.dll DLLBase: 0x7fff89800000 SizeOfImage: 0x66000 ParentDllBase: 0x0 OriginalBase: 0x7fff89800000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+472ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mfplat.dll DLLBase: 0x7fff97630000 SizeOfImage: 0x21e000 ParentDllBase: 0x0 OriginalBase: 0x7fff97630000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+475ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\RTWorkQ.DLL DLLBase: 0x7fff975e0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff97630000 OriginalBase: 0x7fff975e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+477ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NotificationControllerPS.dll DLLBase: 0x7fff8cfa0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cfa0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+491ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ActXPrxy.dll DLLBase: 0x7fff89770000 SizeOfImage: 0x80000 ParentDllBase: 0x0 OriginalBase: 0x7fff89770000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+501ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+503ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\PCShellCommonProxyStub.dll DLLBase: 0x7fff8e4e0000 SizeOfImage: 0x21000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e4e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+509ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+517ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\Windows.UI.Accessibility.dll DLLBase: 0x7fff89700000 SizeOfImage: 0x5e000 ParentDllBase: 0x0 OriginalBase: 0x7fff89700000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+525ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SwitcherDataModel.dll DLLBase: 0x7fff896d0000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fff896d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+529ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\daxexec.dll DLLBase: 0x7fff900a0000 SizeOfImage: 0x11d000 ParentDllBase: 0x7fff901c0000 OriginalBase: 0x7fff900a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+557ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\container.dll DLLBase: 0x7fff90040000 SizeOfImage: 0x52000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff90040000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+557ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\omadmapi.dll DLLBase: 0x7fffaa100000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffaa100000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+559ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CloudExperienceHostCommon.dll DLLBase: 0x7fff91060000 SizeOfImage: 0x14e000 ParentDllBase: 0x0 OriginalBase: 0x7fff91060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+559ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dsreg.dll DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+563ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptngc.dll DLLBase: 0x7fff92440000 SizeOfImage: 0x87000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fff92440000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+563ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dmEnrollEngine.DLL DLLBase: 0x7fff895c0000 SizeOfImage: 0x100000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fff895c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+567ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cflapi.dll DLLBase: 0x7fff89570000 SizeOfImage: 0x47000 ParentDllBase: 0x7ff656970000 OriginalBase: 0x7fff89570000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+583ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+585ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CloudExperienceHostRedirection.dll DLLBase: 0x7fff89530000 SizeOfImage: 0x32000 ParentDllBase: 0x0 OriginalBase: 0x7fff89530000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+601ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\UserSetup.Eligibility.dll DLLBase: 0x7fff89490000 SizeOfImage: 0x93000 ParentDllBase: 0x0 OriginalBase: 0x7fff89490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+603ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\clipc.dll DLLBase: 0x7fff8cea0000 SizeOfImage: 0x38000 ParentDllBase: 0x7fff89490000 OriginalBase: 0x7fff8cea0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+605ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\MSVCP140_APP.dll DLLBase: 0x7fff8c760000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff89490000 OriginalBase: 0x7fff8c760000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+605ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\NETAPI32.dll DLLBase: 0x7fff95f70000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff89490000 OriginalBase: 0x7fff95f70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+605ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_APP.dll DLLBase: 0x7fff920c0000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff89490000 OriginalBase: 0x7fff920c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+605ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9e3a0000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff8c760000 OriginalBase: 0x7fff9e3a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+605ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WKSCLI.DLL DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+607ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.InprocObjects.dll DLLBase: 0x7fff89430000 SizeOfImage: 0x58000 ParentDllBase: 0x0 OriginalBase: 0x7fff89430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+611ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncShell64.dll DLLBase: 0x7fff88170000 SizeOfImage: 0x2c1000 ParentDllBase: 0x0 OriginalBase: 0x7fff88170000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+729ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff88170000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+731ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\VERSION.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff88170000 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+733ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Secur32.dll DLLBase: 0x7fffa74f0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff88170000 OriginalBase: 0x7fffa74f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+733ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\EhStorShell.dll DLLBase: 0x7fff877c0000 SizeOfImage: 0x38000 ParentDllBase: 0x0 OriginalBase: 0x7fff877c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+759ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SETUPAPI.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x7fff877c0000 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+761ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\cscui.dll DLLBase: 0x7fff87680000 SizeOfImage: 0xcd000 ParentDllBase: 0x0 OriginalBase: 0x7fff87680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+763ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+835ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Gaming.Input.dll DLLBase: 0x7fffa1ab0000 SizeOfImage: 0xe0000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1ab0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1160ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll DLLBase: 0x7fffa7330000 SizeOfImage: 0x14000 ParentDllBase: 0x7fff8ef80000 OriginalBase: 0x7fffa7330000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1164ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CloudRestoreLauncher.dll DLLBase: 0x7fff85de0000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fff85de0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1166ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\stobject.dll DLLBase: 0x7fff85d70000 SizeOfImage: 0x68000 ParentDllBase: 0x0 OriginalBase: 0x7fff85d70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1176ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1183ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\BatMeter.dll DLLBase: 0x7fff85d40000 SizeOfImage: 0x27000 ParentDllBase: 0x7fff85d70000 OriginalBase: 0x7fff85d40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1185ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1187ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll DLLBase: 0x7fff85cd0000 SizeOfImage: 0x66000 ParentDllBase: 0x0 OriginalBase: 0x7fff85cd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1187ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll DLLBase: 0x7fff859f0000 SizeOfImage: 0x2d6000 ParentDllBase: 0x0 OriginalBase: 0x7fff859f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1192ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ShellExperiences\TileControl.dll DLLBase: 0x7fff858f0000 SizeOfImage: 0x7c000 ParentDllBase: 0x0 OriginalBase: 0x7fff858f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1194ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ShellComponents\WindowsInternal.ShellUI.dll DLLBase: 0x7fff858c0000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fff858c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1196ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8d020000 SizeOfImage: 0x5d4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1202ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WMICLNT.dll DLLBase: 0x7fffa38e0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fff85d70000 OriginalBase: 0x7fffa38e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1204ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\es.dll DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1206ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\prnfldr.dll DLLBase: 0x7fff85800000 SizeOfImage: 0x42000 ParentDllBase: 0x0 OriginalBase: 0x7fff85800000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1208ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1212ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1216ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1218ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1220ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1226ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\atlthunk.dll DLLBase: 0x7fff9aa50000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff9aa50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1230ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\Actioncenter.dll DLLBase: 0x7fff865f0000 SizeOfImage: 0x53000 ParentDllBase: 0x0 OriginalBase: 0x7fff865f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dxp.dll DLLBase: 0x7fff86570000 SizeOfImage: 0x7c000 ParentDllBase: 0x0 OriginalBase: 0x7fff86570000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\Taskbar.View.dll DLLBase: 0x7fff84db0000 SizeOfImage: 0xa41000 ParentDllBase: 0x0 OriginalBase: 0x7fff84db0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1239ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\MFSENSORGROUP.dll DLLBase: 0x7fff94fc0000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fff84db0000 OriginalBase: 0x7fff94fc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1241ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Syncreg.dll DLLBase: 0x7fff86340000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fff86340000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1247ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1257ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wpdshserviceobj.dll DLLBase: 0x7fff84090000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff84090000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1263ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\PortableDeviceTypes.dll DLLBase: 0x7fff84050000 SizeOfImage: 0x33000 ParentDllBase: 0x0 OriginalBase: 0x7fff84050000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1265ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\PortableDeviceApi.dll DLLBase: 0x7fffa2180000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2180000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1267ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1269ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1269ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\cscobj.dll DLLBase: 0x7fff838c0000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fff838c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1270ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ieframe.dll DLLBase: 0x7fff83920000 SizeOfImage: 0x72d000 ParentDllBase: 0x0 OriginalBase: 0x7fff83920000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1272ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msIso.dll DLLBase: 0x7fff83870000 SizeOfImage: 0x47000 ParentDllBase: 0x0 OriginalBase: 0x7fff83870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1289ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\srchadmin.dll DLLBase: 0x7fff83810000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fff83810000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Devices.Sensors.dll DLLBase: 0x7fff97fa0000 SizeOfImage: 0x176000 ParentDllBase: 0x0 OriginalBase: 0x7fff97fa0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1299ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\shdocvw.dll DLLBase: 0x7fff83330000 SizeOfImage: 0x93000 ParentDllBase: 0x0 OriginalBase: 0x7fff83330000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1303ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff83330000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1303ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MLANG.dll DLLBase: 0x7fff832e0000 SizeOfImage: 0x44000 ParentDllBase: 0x0 OriginalBase: 0x7fff832e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1309ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\imapi2.dll DLLBase: 0x7fff82cf0000 SizeOfImage: 0x80000 ParentDllBase: 0x0 OriginalBase: 0x7fff82cf0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1313ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CapabilityAccessManagerClient.dll DLLBase: 0x7fff86c40000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1322ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AudioSes.dll DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1322ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Media.Devices.dll DLLBase: 0x7fff82df0000 SizeOfImage: 0xf3000 ParentDllBase: 0x0 OriginalBase: 0x7fff82df0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1355ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Devices.Enumeration.dll DLLBase: 0x7fff82c30000 SizeOfImage: 0xb9000 ParentDllBase: 0x0 OriginalBase: 0x7fff82c30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1357ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputSwitch.dll DLLBase: 0x7fff94dc0000 SizeOfImage: 0xdb000 ParentDllBase: 0x0 OriginalBase: 0x7fff94dc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1359ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSWB7.dll DLLBase: 0x7fff82da0000 SizeOfImage: 0x48000 ParentDllBase: 0x0 OriginalBase: 0x7fff82da0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1364ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NetworkIcon.dll DLLBase: 0x7fff9fc40000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fc40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1364ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Energy.dll DLLBase: 0x7fff8c640000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c640000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NetworkUXBroker.dll DLLBase: 0x7fff9f6c0000 SizeOfImage: 0x8f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f6c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DAMediaManager.dll DLLBase: 0x7fff9ffa0000 SizeOfImage: 0x24000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ffa0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1368ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\EthernetMediaManager.dll DLLBase: 0x7fff9f520000 SizeOfImage: 0x67000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f520000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1368ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NcaApi.dll DLLBase: 0x7fff9ff90000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff9ffa0000 OriginalBase: 0x7fff9ff90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1368ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dot3api.dll DLLBase: 0x7fff9f690000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9f520000 OriginalBase: 0x7fff9f690000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1370ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff9f690000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1370ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DevDispItemProvider.dll DLLBase: 0x7fff82c00000 SizeOfImage: 0x22000 ParentDllBase: 0x0 OriginalBase: 0x7fff82c00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1372ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9f520000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1380ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1380ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1382ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1409ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wpnclient.dll DLLBase: 0x7fff82ae0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff82ae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1415ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CompPkgSup.DLL DLLBase: 0x7fff82b60000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fff9f940000 OriginalBase: 0x7fff82b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1426ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bthprops.cpl DLLBase: 0x7fff824f0000 SizeOfImage: 0x43000 ParentDllBase: 0x0 OriginalBase: 0x7fff824f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1453ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bluetoothapis.dll DLLBase: 0x7fff9feb0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff824f0000 OriginalBase: 0x7fff9feb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1458ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\threadpoolwinrt.dll DLLBase: 0x7fff9f160000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f160000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1460ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\authui.dll DLLBase: 0x7fff823a0000 SizeOfImage: 0x4b000 ParentDllBase: 0x0 OriginalBase: 0x7fff823a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1493ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CredProvCommonCore.DLL DLLBase: 0x7fffa6a00000 SizeOfImage: 0x19000 ParentDllBase: 0x7fff823a0000 OriginalBase: 0x7fffa6a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1497ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1515ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1525ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1577ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profext.dll DLLBase: 0x7fffa8140000 SizeOfImage: 0x31000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffa8140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1709ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WinLangdb.dll DLLBase: 0x7fff81e00000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff98860000 OriginalBase: 0x7fff81e00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+2359ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\virtdisk.dll DLLBase: 0x7fff84a60000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff84a60000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+3614ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\smartscreenps.dll DLLBase: 0x7fff81d80000 SizeOfImage: 0x1e000 ParentDllBase: 0x0 OriginalBase: 0x7fff81d80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+3614ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4484ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4484ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\imagehlp.dll DLLBase: 0x7fffac000000 SizeOfImage: 0x20000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffac000000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4487ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RTMediaFrame.dll DLLBase: 0x7fff85970000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff85970000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4489ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mssprxy.dll DLLBase: 0x7fff661d0000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fff661d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+7411ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryBroker.dll DLLBase: 0x7fff90460000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff90460000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+8557ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll DLLBase: 0x7fff658d0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fff658d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+8575ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\system32\zipfldr.dll DLLBase: 0x7fff657e0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fff657e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:02Z (+14284ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\archiveint.dll DLLBase: 0x7fff65670000 SizeOfImage: 0x168000 ParentDllBase: 0x7fff657e0000 OriginalBase: 0x7fff65670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:02Z (+14284ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff65670000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:02Z (+14284ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DUI70.dll DLLBase: 0x7fff654b0000 SizeOfImage: 0x1b0000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fff654b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:02Z (+14304ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DUser.dll DLLBase: 0x7fff65400000 SizeOfImage: 0xac000 ParentDllBase: 0x7fff654b0000 OriginalBase: 0x7fff65400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:02Z (+14316ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll DLLBase: 0x7fff8a990000 SizeOfImage: 0xfe000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a990000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll DLLBase: 0x7fff8ab20000 SizeOfImage: 0xcf000 ParentDllBase: 0x7fff8a990000 OriginalBase: 0x7fff8ab20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.FrameworkUdk.System.dll DLLBase: 0x7fff8a800000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a800000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll DLLBase: 0x7fff8a710000 SizeOfImage: 0x1e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8ac00000 SizeOfImage: 0xe7d000 ParentDllBase: 0x0 OriginalBase: 0x7fff8ac00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll DLLBase: 0x7fff8aaa0000 SizeOfImage: 0x77000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fff8aaa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll DLLBase: 0x7fff9b310000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b310000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll DLLBase: 0x7fff89be0000 SizeOfImage: 0x69c000 ParentDllBase: 0x0 OriginalBase: 0x7fff89be0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll DLLBase: 0x7fff8a440000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a440000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16309ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll DLLBase: 0x7fff8a3f0000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff8a440000 OriginalBase: 0x7fff8a3f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16309ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\dcompi.dll DLLBase: 0x7fff65230000 SizeOfImage: 0x1be000 ParentDllBase: 0x0 OriginalBase: 0x7fff65230000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16326ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Composition.OSSupport.dll DLLBase: 0x7fff6d280000 SizeOfImage: 0xe000 ParentDllBase: 0x7fff65230000 OriginalBase: 0x7fff6d280000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16332ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\dwmcorei.dll DLLBase: 0x7fff64f40000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fff65230000 OriginalBase: 0x7fff64f40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16332ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\marshal.dll DLLBase: 0x7fff64eb0000 SizeOfImage: 0x8b000 ParentDllBase: 0x7fff65230000 OriginalBase: 0x7fff64eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16332ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\D3DCOMPILER_47.dll DLLBase: 0x7fffa4f70000 SizeOfImage: 0x47f000 ParentDllBase: 0x7fff64f40000 OriginalBase: 0x7fffa4f70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16332ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.InputStateManager.dll DLLBase: 0x7fff64e30000 SizeOfImage: 0x6e000 ParentDllBase: 0x7fff64f40000 OriginalBase: 0x7fff64e30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16332ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Input.dll DLLBase: 0x7fff64cc0000 SizeOfImage: 0x168000 ParentDllBase: 0x7fff64e30000 OriginalBase: 0x7fff64cc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16340ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.dll DLLBase: 0x7fff64c40000 SizeOfImage: 0x6f000 ParentDllBase: 0x0 OriginalBase: 0x7fff64c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16387ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight.dll DLLBase: 0x7fff64b60000 SizeOfImage: 0xd8000 ParentDllBase: 0x0 OriginalBase: 0x7fff64b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16405ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\FileExplorerExtensions.dll DLLBase: 0x7fff64670000 SizeOfImage: 0x4e1000 ParentDllBase: 0x0 OriginalBase: 0x7fff64670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16405ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\shacct.dll DLLBase: 0x7fffa4b80000 SizeOfImage: 0x29000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4b80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16467ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll DLLBase: 0x7fff86e70000 SizeOfImage: 0x421000 ParentDllBase: 0x0 OriginalBase: 0x7fff86e70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16467ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\gdiplus.dll DLLBase: 0x7fff8de50000 SizeOfImage: 0x1df000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fff8de50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16695ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x102ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.DirectManipulation.dll DLLBase: 0x7fff645a0000 SizeOfImage: 0xa9000 ParentDllBase: 0x0 OriginalBase: 0x7fff645a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16783ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\wuceffectsi.dll DLLBase: 0x7fff64420000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fff64420000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16886ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Internal.dll DLLBase: 0x7fff64330000 SizeOfImage: 0xe8000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fff64330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+16929ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\MPR.dll DLLBase: 0x7fff9d370000 SizeOfImage: 0x21000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff9d370000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:05Z (+17036ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Cabinet.dll DLLBase: 0x7fff878b0000 SizeOfImage: 0x2a000 ParentDllBase: 0x7fffa5670000 OriginalBase: 0x7fff878b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:05Z (+17070ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dlnashext.dll DLLBase: 0x7fff64250000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff64250000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:05Z (+17070ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\PlayToDevice.dll DLLBase: 0x7fff641f0000 SizeOfImage: 0x5c000 ParentDllBase: 0x0 OriginalBase: 0x7fff641f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:05Z (+17083ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wpdshext.dll DLLBase: 0x7fff64140000 SizeOfImage: 0xab000 ParentDllBase: 0x0 OriginalBase: 0x7fff64140000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:05Z (+17083ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\EhStorAPI.dll DLLBase: 0x7fff64110000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff64110000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:05Z (+17098ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pcacli.dll DLLBase: 0x7fffa8be0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa8be0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+25622ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sfc_os.dll DLLBase: 0x7fff9f660000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f660000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+25622ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ServicingCommon.dll DLLBase: 0x7fffaa620000 SizeOfImage: 0xe1000 ParentDllBase: 0x7fff9f660000 OriginalBase: 0x7fffaa620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+25622ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 6860: FullDllName: C:\Windows\System32\ShellHost.exe DLLBase: 0x7ff65ba10000 SizeOfImage: 0x8e000 ParentDllBase: 0x0 OriginalBase: 0x7ff65ba10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff65ba10000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7ff65ba10000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffaab90000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff65ba10000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7ff65ba10000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ControlCenter.dll DLLBase: 0x7fff8e040000 SizeOfImage: 0x3b8000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e040000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fff8e040000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff8e040000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff8e040000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff8e040000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\languageoverlayutil.dll DLLBase: 0x7fff9a980000 SizeOfImage: 0x43000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a980000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8d020000 SizeOfImage: 0x5d4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+55ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WindowManagementAPI.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+63ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+66ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+66ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+66ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+68ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+70ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+74ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+74ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+74ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+76ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+79ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DataExchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+81ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+81ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+83ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msctf.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+99ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+221ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 7096: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\appinfo.dll DLLBase: 0x7fff8cbf0000 SizeOfImage: 0x67000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cbf0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appinfoext.dll DLLBase: 0x7fff9f4f0000 SizeOfImage: 0xa000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fff9f4f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\daxexec.dll DLLBase: 0x7fff900a0000 SizeOfImage: 0x11d000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fff900a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\container.dll DLLBase: 0x7fff90040000 SizeOfImage: 0x52000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff90040000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\AppXAllUserStore.dll DLLBase: 0x7fffa9bb0000 SizeOfImage: 0x71000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fffa9bb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\licensemanagerapi.dll DLLBase: 0x7fff90bc0000 SizeOfImage: 0x21000 ParentDllBase: 0x7fff900a0000 OriginalBase: 0x7fff90bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\Wldp.dll DLLBase: 0x7fffa9960000 SizeOfImage: 0x6b000 ParentDllBase: 0x7fff8cbf0000 OriginalBase: 0x7fffa9960000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+185ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 7116: FullDllName: C:\WINDOWS\system32\SppExtComObj.exe DLLBase: 0x7ff65bf80000 SizeOfImage: 0x8d000 ParentDllBase: 0x0 OriginalBase: 0x7ff65bf80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffabd00000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ACTIVEDS.dll DLLBase: 0x7fff8cba0000 SizeOfImage: 0x4a000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fff8cba0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\logoncli.dll DLLBase: 0x7fffa9360000 SizeOfImage: 0x46000 ParentDllBase: 0x7ff65bf80000 OriginalBase: 0x7fffa9360000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\adsldpc.dll DLLBase: 0x7fff8cb50000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff8cba0000 OriginalBase: 0x7fff8cb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WLDAP32.dll DLLBase: 0x7fffabad0000 SizeOfImage: 0x7c000 ParentDllBase: 0x7fff8cb50000 OriginalBase: 0x7fffabad0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fffa8270000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffa9950000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\adsldp.dll DLLBase: 0x7fff8a610000 SizeOfImage: 0x4d000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a610000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+224ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+227ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff8cb50000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+229ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa9360000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+231ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 6156: FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe DLLBase: 0x7ff740cf0000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7ff740cf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xa2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff740cf0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff740cf0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff740cf0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9e3a0000 SizeOfImage: 0xc000 ParentDllBase: 0x7ff740cf0000 OriginalBase: 0x7fff9e3a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MSVCP140_APP.dll DLLBase: 0x7fff8c760000 SizeOfImage: 0x8c000 ParentDllBase: 0x7ff740cf0000 OriginalBase: 0x7fff8c760000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_APP.dll DLLBase: 0x7fff920c0000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff9e3a0000 OriginalBase: 0x7fff920c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fff9cfc0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResumeView.dll DLLBase: 0x7fff8c230000 SizeOfImage: 0x90000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c230000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff8c230000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff8c230000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff8c230000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+69ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+87ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+91ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+98ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+100ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+104ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+115ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+121ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8ac00000 SizeOfImage: 0xe7d000 ParentDllBase: 0x0 OriginalBase: 0x7fff8ac00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+151ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.dll DLLBase: 0x7fff8ab20000 SizeOfImage: 0xcf000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fff8ab20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+153ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Windowing.Core.dll DLLBase: 0x7fff8aaa0000 SizeOfImage: 0x77000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fff8aaa0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+153ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DWrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+155ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+155ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\VERSION.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+155ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\CoreMessagingXP.dll DLLBase: 0x7fff8a990000 SizeOfImage: 0xfe000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fff8a990000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+155ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+155ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff8ab20000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+155ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+158ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8ab20000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+158ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff8ab20000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+158ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7fffa5400000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+158ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff8ac00000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+158ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x7fff8ab20000 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+160ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+160ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+160ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+160ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+160ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.FrameworkUdk.System.dll DLLBase: 0x7fff8a800000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a800000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+166ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Internal.FrameworkUdk.CBS.dll DLLBase: 0x7fff8a710000 SizeOfImage: 0x1e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+167ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.WindowsAppRuntime.Insights.Resource.dll DLLBase: 0x7fff9b310000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b310000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+171ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+175ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+181ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+211ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+211ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+215ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+215ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+217ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+221ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.Windows.ApplicationModel.Resources.dll DLLBase: 0x7fff8a440000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a440000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+223ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\MRM.dll DLLBase: 0x7fff8a3f0000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff8a440000 OriginalBase: 0x7fff8a3f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+227ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+232ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+237ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll DLLBase: 0x7fff89be0000 SizeOfImage: 0x69c000 ParentDllBase: 0x0 OriginalBase: 0x7fff89be0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+250ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+286ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+288ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 6968: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+-2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cbdhsvc.dll DLLBase: 0x7fff8ba80000 SizeOfImage: 0xe6000 ParentDllBase: 0x0 OriginalBase: 0x7fff8ba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff8ba80000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff8ba80000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8ba80000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+28ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+30ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+32ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windows.applicationmodel.datatransfer.dll DLLBase: 0x7fff8a8c0000 SizeOfImage: 0xc1000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a8c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+34ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff8ba80000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+45ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+48ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\cdp.dll DLLBase: 0x7fff912b0000 SizeOfImage: 0x59f000 ParentDllBase: 0x7fff8ba80000 OriginalBase: 0x7fff912b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fff8ba80000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+2078ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:50Z (+2078ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4127ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4131ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13135ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff8a8c0000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13136ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\appresolver.dll DLLBase: 0x7fff8e400000 SizeOfImage: 0xb6000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e400000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+13148ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:02Z (+14180ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 7236: FullDllName: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe DLLBase: 0xe40000 SizeOfImage: 0x35000 ParentDllBase: 0x0 OriginalBase: 0xe4000000017000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2c4 ImageDll InLegacyLists InIndexes InExceptionTable FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64.dll DLLBase: 0x7fffad770000 SizeOfImage: 0x55000 ParentDllBase: 0x0 OriginalBase: 0x7fffad770000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64base.dll DLLBase: 0x7fffabbf0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fffad770000 OriginalBase: 0x7fffabbf0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64win.dll DLLBase: 0x7fffac150000 SizeOfImage: 0x89000 ParentDllBase: 0x7fffad770000 OriginalBase: 0x7fffac150000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wow64con.dll DLLBase: 0x7fffabbd0000 SizeOfImage: 0x18000 ParentDllBase: 0x7fffad770000 OriginalBase: 0x7fffabbd0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wow64cpu.dll DLLBase: 0x77280000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x77280000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 7536: FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe DLLBase: 0x7ff7547c0000 SizeOfImage: 0x10000 ParentDllBase: 0x0 OriginalBase: 0x7ff7547c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xa2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff7547c0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff7547c0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vccorlib140_app.DLL DLLBase: 0x7fff893d0000 SizeOfImage: 0x52000 ParentDllBase: 0x7ff7547c0000 OriginalBase: 0x7fff893d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff893d0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9e3a0000 SizeOfImage: 0xc000 ParentDllBase: 0x7ff7547c0000 OriginalBase: 0x7fff9e3a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_APP.dll DLLBase: 0x7fff920c0000 SizeOfImage: 0x1d000 ParentDllBase: 0x7ff7547c0000 OriginalBase: 0x7fff920c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MSVCP140_APP.dll DLLBase: 0x7fff8c760000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff893d0000 OriginalBase: 0x7fff8c760000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.UI.dll DLLBase: 0x7fff88870000 SizeOfImage: 0xb52000 ParentDllBase: 0x0 OriginalBase: 0x7fff88870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff88870000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff88870000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff88870000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\uiautomationcore.dll DLLBase: 0x7fff8eb40000 SizeOfImage: 0x431000 ParentDllBase: 0x7fff88870000 OriginalBase: 0x7fff8eb40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff88870000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+47ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+48ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+50ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+50ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+50ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+50ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+52ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+76ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+84ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+84ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.InternalWebApi.dll DLLBase: 0x7fff878e0000 SizeOfImage: 0x814000 ParentDllBase: 0x0 OriginalBase: 0x7fff878e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+86ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff878e0000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+86ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff878e0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+88ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Cabinet.dll DLLBase: 0x7fff878b0000 SizeOfImage: 0x2a000 ParentDllBase: 0x7fff878e0000 OriginalBase: 0x7fff878b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+88ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll DLLBase: 0x7fff87800000 SizeOfImage: 0xa7000 ParentDllBase: 0x0 OriginalBase: 0x7fff87800000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+95ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+95ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Storage.ApplicationData.dll DLLBase: 0x7fff87750000 SizeOfImage: 0x60000 ParentDllBase: 0x0 OriginalBase: 0x7fff87750000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+96ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+108ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+111ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff878e0000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+118ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+120ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.Http.dll DLLBase: 0x7fff87520000 SizeOfImage: 0x153000 ParentDllBase: 0x0 OriginalBase: 0x7fff87520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+122ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+125ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+132ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+132ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+132ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+134ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\FlightSettings.dll DLLBase: 0x7fff9a750000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a750000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+139ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+139ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+142ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wosc.dll DLLBase: 0x7fff9fbb0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fbb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+144ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll DLLBase: 0x7fff9ac80000 SizeOfImage: 0xe4000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ac80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+148ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+162ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+164ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msctf.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+166ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+168ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+170ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+170ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+172ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\RMCLIENT.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+172ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+178ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+178ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+182ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+182ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profext.dll DLLBase: 0x7fffa8140000 SizeOfImage: 0x31000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffa8140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+184ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rometadata.dll DLLBase: 0x7fff90300000 SizeOfImage: 0x39000 ParentDllBase: 0x7fffaab90000 OriginalBase: 0x7fff90300000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+184ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+186ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll DLLBase: 0x7fff94c50000 SizeOfImage: 0x16c000 ParentDllBase: 0x0 OriginalBase: 0x7fff94c50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+199ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextInputFramework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fff94c50000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+199ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fcon.dll DLLBase: 0x7fff9f590000 SizeOfImage: 0xc3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+201ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DataExchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+207ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8d020000 SizeOfImage: 0x5d4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d020000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+229ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+237ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+247ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\threadpoolwinrt.dll DLLBase: 0x7fff9f160000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f160000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+249ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+275ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\vaultcli.dll DLLBase: 0x7fff8eae0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8eae0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+275ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+275ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\tquery.dll DLLBase: 0x7fff8f9d0000 SizeOfImage: 0x366000 ParentDllBase: 0x0 OriginalBase: 0x7fff8f9d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+277ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff8f9d0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+277ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SearchIndexerCore.dll DLLBase: 0x7fff8f8e0000 SizeOfImage: 0xe4000 ParentDllBase: 0x7fff8f9d0000 OriginalBase: 0x7fff8f8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+277ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+279ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+281ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+281ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+281ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+283ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\Common Files\System\Ole DB\oledb32.dll DLLBase: 0x7fff86cc0000 SizeOfImage: 0xe4000 ParentDllBase: 0x0 OriginalBase: 0x7fff86cc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+285ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSDART.DLL DLLBase: 0x7fff8c610000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff86cc0000 OriginalBase: 0x7fff8c610000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+285ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\Comctl32.dll DLLBase: 0x7fff86db0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff86db0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+287ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x102ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+287ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\msftedit.dll DLLBase: 0x7fff943f0000 SizeOfImage: 0x330000 ParentDllBase: 0x0 OriginalBase: 0x7fff943f0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+293ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\globinputhost.dll DLLBase: 0x7fff943b0000 SizeOfImage: 0x38000 ParentDllBase: 0x7fff98860000 OriginalBase: 0x7fff943b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+295ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\aadWamExtension.dll DLLBase: 0x7fff86c00000 SizeOfImage: 0x38000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+302ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.Fontgroups.dll DLLBase: 0x7fff90290000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff90290000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+309ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Microsoft.Web.WebView2.Core.dll DLLBase: 0x7fff86b30000 SizeOfImage: 0xcb000 ParentDllBase: 0x0 OriginalBase: 0x7fff86b30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+311ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll DLLBase: 0x7fff9aab0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff90290000 OriginalBase: 0x7fff9aab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+311ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+313ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+313ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.dll DLLBase: 0x7fff92110000 SizeOfImage: 0xae000 ParentDllBase: 0x0 OriginalBase: 0x7fff92110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+315ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Model.dll DLLBase: 0x7fff868b0000 SizeOfImage: 0x190000 ParentDllBase: 0x0 OriginalBase: 0x7fff868b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+344ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\StartTileData.dll DLLBase: 0x7fff8d600000 SizeOfImage: 0x560000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d600000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+360ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+360ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+362ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.dll DLLBase: 0x7fff940d0000 SizeOfImage: 0x2d7000 ParentDllBase: 0x0 OriginalBase: 0x7fff940d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\biwinrt.dll DLLBase: 0x7fff8c6a0000 SizeOfImage: 0x62000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c6a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+366ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Input.Inking.dll DLLBase: 0x7fff86710000 SizeOfImage: 0x18f000 ParentDllBase: 0x0 OriginalBase: 0x7fff86710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+374ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll DLLBase: 0x7fff8db70000 SizeOfImage: 0xf0000 ParentDllBase: 0x0 OriginalBase: 0x7fff8db70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+376ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WININET.dll DLLBase: 0x7fff9e110000 SizeOfImage: 0x289000 ParentDllBase: 0x7fff87520000 OriginalBase: 0x7fff9e110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+376ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\appresolver.dll DLLBase: 0x7fff8e400000 SizeOfImage: 0xb6000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+385ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TileDataRepository.dll DLLBase: 0x7fff8e540000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+395ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\StateRepository.Core.dll DLLBase: 0x7fff9c5b0000 SizeOfImage: 0xc7000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c5b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+397ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Windows.StateRepository.dll DLLBase: 0x7fff9c870000 SizeOfImage: 0x50e000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+397ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wuceffects.dll DLLBase: 0x7fff866b0000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fff866b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+397ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+399ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll DLLBase: 0x7fff9ad70000 SizeOfImage: 0x18000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ad70000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+401ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+401ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+403ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+403ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+403ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+403ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+407ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+407ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CryptoWinRT.dll DLLBase: 0x7fff86650000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff86650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+430ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+446ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\omadmapi.dll DLLBase: 0x7fffaa100000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffaa100000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+491ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Shared\WebView2SDK\WebView2Standalone.dll DLLBase: 0x7fff82f30000 SizeOfImage: 0x77000 ParentDllBase: 0x0 OriginalBase: 0x7fff82f30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+682ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\EBWebView\x64\EmbeddedBrowserWebView.dll DLLBase: 0x7fff82540000 SizeOfImage: 0x597000 ParentDllBase: 0x0 OriginalBase: 0x7fff82540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+768ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\VERSION.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+772ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x0 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+778ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+780ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff90400000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+780ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+788ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\wv2winrt.dll DLLBase: 0x7fff6ef70000 SizeOfImage: 0x5f2000 ParentDllBase: 0x0 OriginalBase: 0x7fff6ef70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1273ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3317ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryBroker.dll DLLBase: 0x7fff90460000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff90460000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3339ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windows.applicationmodel.datatransfer.dll DLLBase: 0x7fff8a8c0000 SizeOfImage: 0xc1000 ParentDllBase: 0x0 OriginalBase: 0x7fff8a8c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3748ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 7544: FullDllName: C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe DLLBase: 0x7ff662d20000 SizeOfImage: 0x3f000 ParentDllBase: 0x0 OriginalBase: 0x7ff662d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff662d20000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wincorlib.DLL DLLBase: 0x7fff9aae0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff662d20000 OriginalBase: 0x7fff9aae0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fff9aae0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+26ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+33ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+34ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8d020000 SizeOfImage: 0x5d4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d020000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff8d020000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+41ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartDocked.dll DLLBase: 0x7fff88440000 SizeOfImage: 0x41f000 ParentDllBase: 0x0 OriginalBase: 0x7fff88440000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+79ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\StartTileData.dll DLLBase: 0x7fff8d600000 SizeOfImage: 0x560000 ParentDllBase: 0x7fff88440000 OriginalBase: 0x7fff8d600000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+79ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+79ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+81ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll DLLBase: 0x7fff88140000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fff88140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+83ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+85ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+87ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\languageoverlayutil.dll DLLBase: 0x7fff9a980000 SizeOfImage: 0x43000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+89ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+91ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msctf.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+105ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+109ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+111ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+111ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\RMCLIENT.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+113ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+115ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+115ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+122ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+125ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll DLLBase: 0x7fff94c50000 SizeOfImage: 0x16c000 ParentDllBase: 0x0 OriginalBase: 0x7fff94c50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+135ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextInputFramework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fff94c50000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+135ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+149ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DataExchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+154ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Storage.ApplicationData.dll DLLBase: 0x7fff87750000 SizeOfImage: 0x60000 ParentDllBase: 0x0 OriginalBase: 0x7fff87750000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+162ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+164ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+166ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+166ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.dll DLLBase: 0x7fff940d0000 SizeOfImage: 0x2d7000 ParentDllBase: 0x0 OriginalBase: 0x7fff940d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+168ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff940d0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+168ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll DLLBase: 0x7fff8db70000 SizeOfImage: 0xf0000 ParentDllBase: 0x0 OriginalBase: 0x7fff8db70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+214ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+228ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+230ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\appresolver.dll DLLBase: 0x7fff8e400000 SizeOfImage: 0xb6000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+230ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff8e400000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+230ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll DLLBase: 0x7fff86e70000 SizeOfImage: 0x421000 ParentDllBase: 0x0 OriginalBase: 0x7fff86e70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+244ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+244ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SLC.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+244ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_APP.dll DLLBase: 0x7fff920c0000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fff920c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+244ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\COMCTL32.dll DLLBase: 0x7fff86db0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fff86db0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+245ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x102ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\SYSTEM32\Secur32.dll DLLBase: 0x7fffa74f0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fffa74f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+245ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\MSVCP140_APP.dll DLLBase: 0x7fff8c760000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fff8c760000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+245ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9e3a0000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff8c760000 OriginalBase: 0x7fff9e3a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+245ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff86e70000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+245ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SSPICLI.DLL DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa74f0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+247ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+253ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\biwinrt.dll DLLBase: 0x7fff8c6a0000 SizeOfImage: 0x62000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c6a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+257ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+263ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TileDataRepository.dll DLLBase: 0x7fff8e540000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+265ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\StateRepository.Core.dll DLLBase: 0x7fff9c5b0000 SizeOfImage: 0xc7000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c5b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+265ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Windows.StateRepository.dll DLLBase: 0x7fff9c870000 SizeOfImage: 0x50e000 ParentDllBase: 0x7fff8e540000 OriginalBase: 0x7fff9c870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+267ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+305ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+310ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+312ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\omadmapi.dll DLLBase: 0x7fffaa100000 SizeOfImage: 0x3c000 ParentDllBase: 0x7fffa9cf0000 OriginalBase: 0x7fffaa100000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+314ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+318ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+320ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+326ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+326ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+330ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.Fontgroups.dll DLLBase: 0x7fff90290000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff90290000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+330ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll DLLBase: 0x7fff9aab0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff90290000 OriginalBase: 0x7fff9aab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+332ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windows.internal.shell.broker.dll DLLBase: 0x7fff86a40000 SizeOfImage: 0xe2000 ParentDllBase: 0x0 OriginalBase: 0x7fff86a40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+336ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\twinapi.dll DLLBase: 0x7fff92110000 SizeOfImage: 0xae000 ParentDllBase: 0x0 OriginalBase: 0x7fff92110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+336ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+358ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+358ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+362ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowscodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+397ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\threadpoolwinrt.dll DLLBase: 0x7fff9f160000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f160000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+408ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+408ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+408ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+466ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+468ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CryptoWinRT.dll DLLBase: 0x7fff86650000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff86650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+486ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff86650000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+488ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+488ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Energy.dll DLLBase: 0x7fff8c640000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c640000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+531ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+540ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RTMediaFrame.dll DLLBase: 0x7fff85970000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff85970000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+542ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll DLLBase: 0x7fff864c0000 SizeOfImage: 0xa9000 ParentDllBase: 0x0 OriginalBase: 0x7fff864c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+589ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll DLLBase: 0x7fff84aa0000 SizeOfImage: 0x303000 ParentDllBase: 0x0 OriginalBase: 0x7fff84aa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+591ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll DLLBase: 0x7fff86230000 SizeOfImage: 0x10b000 ParentDllBase: 0x0 OriginalBase: 0x7fff86230000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+597ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll DLLBase: 0x7fff861d0000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff861d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+599ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff861d0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+599ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fff861d0000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+601ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+601ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Clipboard.dll DLLBase: 0x7fff84a00000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7fff84a00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+605ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ux-phui.dll DLLBase: 0x7fff84920000 SizeOfImage: 0xd1000 ParentDllBase: 0x0 OriginalBase: 0x7fff84920000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+607ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ReactNativeXaml.dll DLLBase: 0x7fff847b0000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fff847b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+609ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTTurboModule.dll DLLBase: 0x7fff840b0000 SizeOfImage: 0x6fd000 ParentDllBase: 0x0 OriginalBase: 0x7fff840b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+611ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll DLLBase: 0x7fff85850000 SizeOfImage: 0x70000 ParentDllBase: 0x0 OriginalBase: 0x7fff85850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+615ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\hermes.dll DLLBase: 0x7fff833d0000 SizeOfImage: 0x434000 ParentDllBase: 0x0 OriginalBase: 0x7fff833d0000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+645ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\icuuc.dll DLLBase: 0x1a667ff0000 SizeOfImage: 0x9000 ParentDllBase: 0x7fff833d0000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+647ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\icuin.dll DLLBase: 0x1a669b50000 SizeOfImage: 0x8000 ParentDllBase: 0x7fff833d0000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+647ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\icu.DLL DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x1a667ff0000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+647ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.Http.dll DLLBase: 0x7fff87520000 SizeOfImage: 0x153000 ParentDllBase: 0x0 OriginalBase: 0x7fff87520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+805ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WinRtTracing.dll DLLBase: 0x7fff824b0000 SizeOfImage: 0x34000 ParentDllBase: 0x0 OriginalBase: 0x7fff824b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+822ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll DLLBase: 0x7fff81a20000 SizeOfImage: 0xfe000 ParentDllBase: 0x0 OriginalBase: 0x7fff81a20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+861ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\wosc.dll DLLBase: 0x7fff9fbb0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fbb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+869ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll DLLBase: 0x7fff6fa40000 SizeOfImage: 0x1c000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+914ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profext.dll DLLBase: 0x7fffa8140000 SizeOfImage: 0x31000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffa8140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+966ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WININET.dll DLLBase: 0x7fff9e110000 SizeOfImage: 0x289000 ParentDllBase: 0x7fff87520000 OriginalBase: 0x7fff9e110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1298ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1300ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll DLLBase: 0x7fff9ad70000 SizeOfImage: 0x18000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ad70000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1302ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\firewallapi.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x7fff87520000 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1302ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1304ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1304ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1304ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1306ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1308ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.DLL DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1310ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1310ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7fff9e110000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1310ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1312ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1312ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa95b0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:50Z (+1331ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+1331ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\certenroll.dll DLLBase: 0x7fff6e8a0000 SizeOfImage: 0x2c8000 ParentDllBase: 0x0 OriginalBase: 0x7fff6e8a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+1335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\certca.dll DLLBase: 0x7fff6f950000 SizeOfImage: 0xde000 ParentDllBase: 0x7fff6e8a0000 OriginalBase: 0x7fff6f950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+1335ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 7640: FullDllName: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe DLLBase: 0x7ff6347b0000 SizeOfImage: 0x2d1000 ParentDllBase: 0x0 OriginalBase: 0x7ff6347b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xa2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll DLLBase: 0x7fff87490000 SizeOfImage: 0x8c000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fff87490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\NETAPI32.dll DLLBase: 0x7fff95f70000 SizeOfImage: 0x1a000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fff95f70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9ac50000 SizeOfImage: 0xc000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fff9ac50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll DLLBase: 0x7fff90490000 SizeOfImage: 0x1d000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fff90490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\CONCRT140_APP.dll DLLBase: 0x7fff87440000 SizeOfImage: 0x4a000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fff87440000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2ed PackagedBinary ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll DLLBase: 0x7fff87410000 SizeOfImage: 0x2d000 ParentDllBase: 0x7ff6347b0000 OriginalBase: 0x7fff87410000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\DSREG.DLL DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa4bb0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WKSCLI.DLL DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NETUTILS.DLL DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+12ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x0 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+41ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+61ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll DLLBase: 0x7fff902e0000 SizeOfImage: 0xe000 ParentDllBase: 0x0 OriginalBase: 0x7fff902e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+70ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\BiWinrt.dll DLLBase: 0x7fff8c6a0000 SizeOfImage: 0x62000 ParentDllBase: 0x7fff902e0000 OriginalBase: 0x7fff8c6a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+70ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+74ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll DLLBase: 0x7fff902b0000 SizeOfImage: 0x25000 ParentDllBase: 0x0 OriginalBase: 0x7fff902b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+76ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Energy.dll DLLBase: 0x7fff8c640000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c640000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+86ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff8c640000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+86ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+86ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+88ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+94ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 7740: FullDllName: C:\Windows\System32\RuntimeBroker.exe DLLBase: 0x7ff68a5e0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7ff68a5e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll DLLBase: 0x7fff9ac80000 SizeOfImage: 0xe4000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ac80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff9ac80000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Accessibility.dll DLLBase: 0x7fff89700000 SizeOfImage: 0x5e000 ParentDllBase: 0x0 OriginalBase: 0x7fff89700000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+178ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+180ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rometadata.dll DLLBase: 0x7fff90300000 SizeOfImage: 0x39000 ParentDllBase: 0x7fffaab90000 OriginalBase: 0x7fff90300000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+180ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\AppExtension.dll DLLBase: 0x7fff91b10000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fff91b10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+222ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+276ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+282ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+284ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+284ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CapabilityAccessManagerClient.dll DLLBase: 0x7fff86c40000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+286ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+298ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+303ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+303ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+303ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+305ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+305ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+305ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+311ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+311ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Internal.System.UserProfile.dll DLLBase: 0x7fff8cb10000 SizeOfImage: 0x3a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+315ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+317ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+317ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+317ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+317ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+319ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+319ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+322ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+322ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+322ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+322ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+326ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+329ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+336ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+339ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll DLLBase: 0x7fff85fb0000 SizeOfImage: 0x217000 ParentDllBase: 0x0 OriginalBase: 0x7fff85fb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+345ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff85fb0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+345ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff85fb0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+345ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wincorlib.DLL DLLBase: 0x7fff9aae0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff85fb0000 OriginalBase: 0x7fff9aae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+345ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CloudExperienceHostCommon.dll DLLBase: 0x7fff91060000 SizeOfImage: 0x14e000 ParentDllBase: 0x0 OriginalBase: 0x7fff91060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+347ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+347ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+349ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff95490000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+349ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll DLLBase: 0x7fff85850000 SizeOfImage: 0x70000 ParentDllBase: 0x0 OriginalBase: 0x7fff85850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+389ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9e3a0000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff85850000 OriginalBase: 0x7fff9e3a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+389ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\VCRUNTIME140_APP.dll DLLBase: 0x7fff920c0000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff85850000 OriginalBase: 0x7fff920c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+389ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\MSVCP140_APP.dll DLLBase: 0x7fff8c760000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff85850000 OriginalBase: 0x7fff8c760000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+389ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\shell32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x0 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+504ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SettingsEnvironment.Desktop.dll DLLBase: 0x7fff831e0000 SizeOfImage: 0xf3000 ParentDllBase: 0x0 OriginalBase: 0x7fff831e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+506ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\webauthn.dll DLLBase: 0x7fffa4280000 SizeOfImage: 0x1c9000 ParentDllBase: 0x7fff831e0000 OriginalBase: 0x7fffa4280000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+506ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff831e0000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+506ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MFSENSORGROUP.dll DLLBase: 0x7fff94fc0000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fff831e0000 OriginalBase: 0x7fff94fc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+506ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff94fc0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+506ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa4280000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+508ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DismApi.DLL DLLBase: 0x7fff830a0000 SizeOfImage: 0x134000 ParentDllBase: 0x7fff831e0000 OriginalBase: 0x7fff830a0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+508ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SPPC.DLL DLLBase: 0x7fffa3360000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa7f80000 OriginalBase: 0x7fffa3360000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+512ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+514ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\inputhost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x7fff831e0000 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+516ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff9e450000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+516ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff831e0000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+516ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+518ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+520ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\NetworkUXBroker.dll DLLBase: 0x7fff9f6c0000 SizeOfImage: 0x8f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f6c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+520ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\EthernetMediaManager.dll DLLBase: 0x7fff9f520000 SizeOfImage: 0x67000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f520000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+522ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\dot3api.dll DLLBase: 0x7fff9f690000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9f520000 OriginalBase: 0x7fff9f690000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+524ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff9f690000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+524ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+530ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff9f520000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+538ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+540ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3174ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryBroker.dll DLLBase: 0x7fff90460000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff90460000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3192ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3195ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3196ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+3197ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 7764: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\windowsudkservices.shellcommon.dll DLLBase: 0x7fff873e0000 SizeOfImage: 0x20000 ParentDllBase: 0x0 OriginalBase: 0x7fff873e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+16ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll DLLBase: 0x7fff87800000 SizeOfImage: 0xa7000 ParentDllBase: 0x0 OriginalBase: 0x7fff87800000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9e3a0000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fff9e3a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MSVCP140_APP.dll DLLBase: 0x7fff8c760000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff87800000 OriginalBase: 0x7fff8c760000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\VCRUNTIME140_APP.dll DLLBase: 0x7fff920c0000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff8c760000 OriginalBase: 0x7fff920c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rometadata.dll DLLBase: 0x7fff90300000 SizeOfImage: 0x39000 ParentDllBase: 0x7fffaab90000 OriginalBase: 0x7fff90300000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+51ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+55ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+55ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+65ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+67ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+71ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+78ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+82ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 7840: FullDllName: C:\Windows\System32\RuntimeBroker.exe DLLBase: 0x7ff68a5e0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7ff68a5e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppExtension.dll DLLBase: 0x7fff91b10000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fff91b10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff91b10000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SystemSettings.DataModel.dll DLLBase: 0x7fff9bd70000 SizeOfImage: 0x110000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bd70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+76ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\slc.dll DLLBase: 0x7fffa7f80000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fff9bd70000 OriginalBase: 0x7fffa7f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+76ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+78ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+78ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+78ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+80ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+80ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+89ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+93ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+95ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+97ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+99ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+99ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+102ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+104ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff96d20000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+104ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+108ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Internal.System.UserProfile.dll DLLBase: 0x7fff8cb10000 SizeOfImage: 0x3a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+112ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+114ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellCommonCommonProxyStub.dll DLLBase: 0x7fff872a0000 SizeOfImage: 0x134000 ParentDllBase: 0x0 OriginalBase: 0x7fff872a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+116ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+118ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+121ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+121ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+121ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+123ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+125ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+125ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+127ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CloudExperienceHostCommon.dll DLLBase: 0x7fff91060000 SizeOfImage: 0x14e000 ParentDllBase: 0x0 OriginalBase: 0x7fff91060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+127ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+127ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+127ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+129ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff8cb10000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+131ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:48Z (+131ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CapabilityAccessManagerClient.dll DLLBase: 0x7fff86c40000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+132ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+132ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:48Z (+136ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff960b0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+173ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+197ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DMCmnUtils.dll DLLBase: 0x7fff8e6e0000 SizeOfImage: 0xd5000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fff8e6e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+251ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\StartTileData.dll DLLBase: 0x7fff8d600000 SizeOfImage: 0x560000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d600000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+321ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MDMRegistration.DLL DLLBase: 0x7fffa9cf0000 SizeOfImage: 0x8e000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fffa9cf0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+321ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shell32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff8d600000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+335ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+343ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.OnlineId.dll DLLBase: 0x7fff9ac80000 SizeOfImage: 0xe4000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ac80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+750ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff9ac80000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+754ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\DPAPI.DLL DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+754ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffaa610000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+756ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\FlightSettings.dll DLLBase: 0x7fff9a750000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a750000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+791ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wosc.dll DLLBase: 0x7fff9fbb0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fbb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+799ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+890ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\fcon.dll DLLBase: 0x7fff9f590000 SizeOfImage: 0xc3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1072ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1084ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1086ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1091ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 6956: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+7ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\licensemanagersvc.dll DLLBase: 0x7fff86490000 SizeOfImage: 0x23000 ParentDllBase: 0x0 OriginalBase: 0x7fff86490000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff86490000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff86490000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\LicenseManager.dll DLLBase: 0x7fff86360000 SizeOfImage: 0x129000 ParentDllBase: 0x7fff86490000 OriginalBase: 0x7fff86360000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff86360000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\CLIPC.dll DLLBase: 0x7fff8cea0000 SizeOfImage: 0x38000 ParentDllBase: 0x7fff86360000 OriginalBase: 0x7fff8cea0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff86360000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+48ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 7916: FullDllName: C:\WINDOWS\system32\backgroundTaskHost.exe DLLBase: 0x7ff6df940000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7ff6df940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff6df940000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff6df940000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+10ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+23ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+86ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+88ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff9ab50000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+88ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+98ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+108ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+114ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+123ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+128ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\biwinrt.dll DLLBase: 0x7fff8c6a0000 SizeOfImage: 0x62000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c6a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+143ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.23101.22.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll DLLBase: 0x7fff823f0000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff823f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+202ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff823f0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+218ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll DLLBase: 0x7fff87490000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff823f0000 OriginalBase: 0x7fff87490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+218ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll DLLBase: 0x7fff90490000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff823f0000 OriginalBase: 0x7fff90490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+220ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9ac50000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff87490000 OriginalBase: 0x7fff9ac50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+220ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\AppContracts.dll DLLBase: 0x7fff906d0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff906d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+438ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+440ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+489ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+799ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 8160: FullDllName: C:\WINDOWS\system32\backgroundTaskHost.exe DLLBase: 0x7ff6df940000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7ff6df940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20aacd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20aac4 ImageDll InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2cabcc ImageDll LoadNotificationsSent InLegacyLists InIndexes ShimDll InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff6df940000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff6df940000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+22ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mrmcorer.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+53ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+72ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff9ab50000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+81ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+98ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+103ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+105ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+110ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+125ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\biwinrt.dll DLLBase: 0x7fff8c6a0000 SizeOfImage: 0x62000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c6a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+149ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.YourPhone_0.24012.105.0_x64__8wekyb3d8bbwe\SharedUtilities.Stub.BackgroundTasks.dll DLLBase: 0x7fff82450000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff82450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+182ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff82450000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+212ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1_APP.dll DLLBase: 0x7fff9ac50000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff82450000 OriginalBase: 0x7fff9ac50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+212ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\VCRUNTIME140_APP.dll DLLBase: 0x7fff90490000 SizeOfImage: 0x1d000 ParentDllBase: 0x7fff82450000 OriginalBase: 0x7fff90490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+216ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe\MSVCP140_APP.dll DLLBase: 0x7fff87490000 SizeOfImage: 0x8c000 ParentDllBase: 0x7fff82450000 OriginalBase: 0x7fff87490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+218ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\AppContracts.dll DLLBase: 0x7fff906d0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff906d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+438ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+440ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+506ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+799ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 8224: (ERROR 5) 8532: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+5ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa74c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+5ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff9ab50000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff9ab50000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\capauthz.dll DLLBase: 0x7fff90400000 SizeOfImage: 0x5d000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff90400000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll DLLBase: 0x7fff6fa60000 SizeOfImage: 0x11fb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+99ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6fa60000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+99ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+105ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+110ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll DLLBase: 0x7fff84a80000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fff84a80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+112ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DiagnosticDataSettings.dll DLLBase: 0x7fffaa1d0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fff84a80000 OriginalBase: 0x7fffaa1d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+112ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll DLLBase: 0x7fffa99d0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffaa1d0000 OriginalBase: 0x7fffa99d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+115ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+117ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+117ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x0 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+119ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+119ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffabc00000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+119ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netjoin.dll DLLBase: 0x7fffa2380000 SizeOfImage: 0x34000 ParentDllBase: 0x7fffa24c0000 OriginalBase: 0x7fffa2380000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+119ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\JoinUtil.dll DLLBase: 0x7fffa98d0000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa98d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+119ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa2380000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+121ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+130ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+134ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+134ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DWrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+136ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+136ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x0 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+138ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+138ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+139ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+141ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a\COMCTL32.dll DLLBase: 0x7fff86db0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff86db0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x102ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+143ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffaa610000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+143ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+143ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+145ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+151ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x0 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+153ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+153ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+157ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wevtapi.dll DLLBase: 0x7fffa4620000 SizeOfImage: 0x53000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4620000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+162ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+164ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+166ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+168ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+168ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\mscms.dll DLLBase: 0x7fffa0d70000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0d70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+168ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+170ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+170ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+170ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+174ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x0 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+177ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+177ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+179ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+185ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profext.dll DLLBase: 0x7fffa8140000 SizeOfImage: 0x31000 ParentDllBase: 0x7fffa9650000 OriginalBase: 0x7fffa8140000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+187ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+264ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+264ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SETUPAPI.dll DLLBase: 0x7fffad2e0000 SizeOfImage: 0x486000 ParentDllBase: 0x0 OriginalBase: 0x7fffad2e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+272ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+272ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+272ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+274ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Domain Actions\3.0.0.16\domain_actions.dll DLLBase: 0x7fff82d80000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff82d80000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+276ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xc22cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed DontCallForThreads ProcessAttachCalled FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\VCRUNTIME140.dll DLLBase: 0x7fff82ba0000 SizeOfImage: 0x1e000 ParentDllBase: 0x7fff82d80000 OriginalBase: 0x7fff82ba0000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+276ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+282ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+282ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+284ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff9e450000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+284ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+286ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dataexchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+288ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\atlthunk.dll DLLBase: 0x7fff9aa50000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff9aa50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+322ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\OLEACC.dll DLLBase: 0x7fff8c590000 SizeOfImage: 0x7d000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c590000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+324ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+324ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+333ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+333ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\webview2_integration.dll DLLBase: 0x7fff95b50000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fff95b50000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+335ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\VCRUNTIME140_1.dll DLLBase: 0x7fff8e970000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff95b50000 OriginalBase: 0x7fff8e970000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+335ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\telclient.dll DLLBase: 0x7fff65c40000 SizeOfImage: 0x292000 ParentDllBase: 0x0 OriginalBase: 0x7fff65c40000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6251ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dbghelp.dll DLLBase: 0x7fffaa2f0000 SizeOfImage: 0x241000 ParentDllBase: 0x7fff65c40000 OriginalBase: 0x7fffaa2f0000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6251ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6264ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6264ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MFPlat.DLL DLLBase: 0x7fff97630000 SizeOfImage: 0x21e000 ParentDllBase: 0x7fff6f570000 OriginalBase: 0x7fff97630000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6264ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\RTWorkQ.DLL DLLBase: 0x7fff975e0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff97630000 OriginalBase: 0x7fff975e0000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6264ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\vaultcli.dll DLLBase: 0x7fff8eae0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8eae0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6264ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\oneds.dll DLLBase: 0x7fff65910000 SizeOfImage: 0x328000 ParentDllBase: 0x0 OriginalBase: 0x7fff65910000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6280ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll DLLBase: 0x7fff6eb70000 SizeOfImage: 0x3fe000 ParentDllBase: 0x0 OriginalBase: 0x7fff6eb70000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6282ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6282ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6296ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\aadWamExtension.dll DLLBase: 0x7fff86c00000 SizeOfImage: 0x38000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+6300ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\TenantRestrictionsPlugin.dll DLLBase: 0x7fff658f0000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fff658f0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6441ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6502ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6502ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PCPKsp.dll DLLBase: 0x7fff9f3c0000 SizeOfImage: 0x128000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f3c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6502ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\usermgrproxy.dll DLLBase: 0x7fffa1d20000 SizeOfImage: 0x5f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6502ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\tbs.dll DLLBase: 0x7fffa3940000 SizeOfImage: 0x19000 ParentDllBase: 0x7fff9f3c0000 OriginalBase: 0x7fffa3940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6502ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ncryptprov.dll DLLBase: 0x7fff95fe0000 SizeOfImage: 0x8e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95fe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:56Z (+6533ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 8564: FullDllName: C:\WINDOWS\system32\ctfmon.exe DLLBase: 0x7ff61b310000 SizeOfImage: 0x11000 ParentDllBase: 0x0 OriginalBase: 0x7ff61b310000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff61b310000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MsCtfMonitor.DLL DLLBase: 0x7fff9ee90000 SizeOfImage: 0x19000 ParentDllBase: 0x7ff61b310000 OriginalBase: 0x7fff9ee90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MSUTB.dll DLLBase: 0x7fff9ee30000 SizeOfImage: 0x4f000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fff9ee30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fff9ee30000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffa2dc0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+38ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\InputService.dll DLLBase: 0x7fff9e930000 SizeOfImage: 0x4ee000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\TextInputMethodFormatter.dll DLLBase: 0x7fff9e710000 SizeOfImage: 0x95000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fff9e710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+41ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9e710000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+41ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MTFServer.dll DLLBase: 0x7fff9cf30000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fff9cf30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+44ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextInputFramework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x0 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+52ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+54ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowmanagementapi.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+54ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+55ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+57ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\InputLocaleManager.dll DLLBase: 0x7fff9e6c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+60ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+60ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+66ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\KBDPL1.DLL DLLBase: 0x7fffa8ff0000 SizeOfImage: 0x6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+66ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+68ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MsSpellCheckingFacility.dll DLLBase: 0x7fff81e40000 SizeOfImage: 0x14f000 ParentDllBase: 0x0 OriginalBase: 0x7fff81e40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+91ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff81e40000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+95ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\inputhost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+97ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff81e40000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+97ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\mtf.dll DLLBase: 0x7fff95ea0000 SizeOfImage: 0x48000 ParentDllBase: 0x0 OriginalBase: 0x7fff95ea0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+1054ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:01Z (+12391ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+24086ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 8608: FullDllName: C:\WINDOWS\system32\taskhostw.exe DLLBase: 0x7ff7f25d0000 SizeOfImage: 0x1a000 ParentDllBase: 0x0 OriginalBase: 0x7ff7f25d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\imm32.dll DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+24ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff7f25d0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shell32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x0 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+35ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TaskSchdPS.dll DLLBase: 0x7fff84a30000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff84a30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+167ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\fcon.dll DLLBase: 0x7fff9f590000 SizeOfImage: 0xc3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21150ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9f590000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21150ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wosc.dll DLLBase: 0x7fff9fbb0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fbb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21161ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21161ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9fbb0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21170ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+21170ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\FlightSettings.dll DLLBase: 0x7fff9a750000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a750000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21181ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21239ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa41b0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+21239ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffa41b0000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+21239ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 8756: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+13ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+16ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 8880: FullDllName: C:\WINDOWS\system32\DllHost.exe DLLBase: 0x7ff611bb0000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7ff611bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff611bb0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff611bb0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shell32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x0 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\TaskSchdPS.dll DLLBase: 0x7fff84a30000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff84a30000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff84a30000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.ui.immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff98a00000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+22ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 8904: FullDllName: C:\Windows\System32\RuntimeBroker.exe DLLBase: 0x7ff68a5e0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7ff68a5e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppContracts.dll DLLBase: 0x7fff906d0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff906d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff906d0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff906d0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+18ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+23ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OnDemandBrokerClient.dll DLLBase: 0x7fff8e4c0000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff906d0000 OriginalBase: 0x7fff8e4c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff8e4c0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+43ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 8992: FullDllName: C:\Windows\System32\RuntimeBroker.exe DLLBase: 0x7ff68a5e0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7ff68a5e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppContracts.dll DLLBase: 0x7fff906d0000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7fff906d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff906d0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fff906d0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+14ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+16ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+24ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+27ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OnDemandBrokerClient.dll DLLBase: 0x7fff8e4c0000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff906d0000 OriginalBase: 0x7fff8e4c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+36ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff8e4c0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+36ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 9084: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x26659a80000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x26659a80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x26659a80000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll DLLBase: 0x7fff6fa60000 SizeOfImage: 0x11fb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6fa60000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+27ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x0 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+33ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x26659a80000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+44ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mf.dll DLLBase: 0x7fffa8c00000 SizeOfImage: 0x87000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8c00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mfplat.dll DLLBase: 0x7fff97630000 SizeOfImage: 0x21e000 ParentDllBase: 0x0 OriginalBase: 0x7fff97630000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\RTWorkQ.DLL DLLBase: 0x7fff975e0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff97630000 OriginalBase: 0x7fff975e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+49ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.0.61931.0_x64__8wekyb3d8bbwe\x64\hevcdecoder_store.dll DLLBase: 0x7fff6f570000 SizeOfImage: 0x23f000 ParentDllBase: 0x0 OriginalBase: 0x7fff6f570000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\D3DCompiler_47.dll DLLBase: 0x7fff6de40000 SizeOfImage: 0x48d000 ParentDllBase: 0x0 OriginalBase: 0x7fff6de40000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\libglesv2.dll DLLBase: 0x7fff6d760000 SizeOfImage: 0x6d1000 ParentDllBase: 0x0 OriginalBase: 0x7fff6d760000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\libegl.dll DLLBase: 0x7fff6f8c0000 SizeOfImage: 0x81000 ParentDllBase: 0x0 OriginalBase: 0x7fff6f8c0000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vulkan-1.dll DLLBase: 0x7fff6f7d0000 SizeOfImage: 0xe9000 ParentDllBase: 0x0 OriginalBase: 0x7fff6f7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff6f7d0000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\vk_swiftshader.dll DLLBase: 0x7fff6d2a0000 SizeOfImage: 0x4c0000 ParentDllBase: 0x0 OriginalBase: 0x7fff6d2a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2156ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2167ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2180ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+2180ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+2198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\D3D10Warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+2198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 9120: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+8ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll DLLBase: 0x7fff6fa60000 SizeOfImage: 0x11fb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6fa60000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+27ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+35ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x0 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+37ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+42ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+44ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+46ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+89ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+91ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+99ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+140ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.DLL DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+143ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffaa610000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+143ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 6020: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll DLLBase: 0x7fff6fa60000 SizeOfImage: 0x11fb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6fa60000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 5644: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x18d01040000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x18d01040000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x18d01040000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll DLLBase: 0x7fff6fa60000 SizeOfImage: 0x11fb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6fa60000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dbghelp.dll DLLBase: 0x7fffaa2f0000 SizeOfImage: 0x241000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa2f0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ws2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:49Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll DLLBase: 0x7fff6eb70000 SizeOfImage: 0x3fe000 ParentDllBase: 0x0 OriginalBase: 0x7fff6eb70000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:49Z (+45ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\crypt32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+62ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:50Z (+65ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 9520: (ERROR 5) 9564: FullDllName: C:\Windows\System32\smartscreen.exe DLLBase: 0x7ff7cc370000 SizeOfImage: 0x96000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cc370000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SmartScreen.DLL DLLBase: 0x7fff6e2d0000 SizeOfImage: 0x5c7000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fff6e2d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fff6e2d0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WTDSENSOR.dll DLLBase: 0x7fffa9c50000 SizeOfImage: 0xb000 ParentDllBase: 0x7ff7cc370000 OriginalBase: 0x7fffa9c50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\smartscreenps.dll DLLBase: 0x7fff81d80000 SizeOfImage: 0x1e000 ParentDllBase: 0x0 OriginalBase: 0x7fff81d80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Management.Workplace.dll DLLBase: 0x7fff9b370000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff9b370000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9b370000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 9608: FullDllName: C:\Windows\System32\SecurityHealthSystray.exe DLLBase: 0x7ff740700000 SizeOfImage: 0x43000 ParentDllBase: 0x0 OriginalBase: 0x7ff740700000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff740700000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7ff740700000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffabd00000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffabd00000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffabd00000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff740700000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:51Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\atlthunk.dll DLLBase: 0x7fff9aa50000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff9aa50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+801ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+801ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+803ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+804ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: \\?\C:\Windows\System32\SecurityHealthSSO.dll DLLBase: 0x7fff6d140000 SizeOfImage: 0xea000 ParentDllBase: 0x0 OriginalBase: 0x7fff6d140000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+806ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SecurityHealthSsoUdk.dll DLLBase: 0x7fff81bc0000 SizeOfImage: 0x1c000 ParentDllBase: 0x0 OriginalBase: 0x7fff81bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+806ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+807ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff6d140000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+808ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+808ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff81bc0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+810ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+811ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+811ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: \\?\C:\Windows\System32\SecurityHealthProxyStub.dll DLLBase: 0x7fff81b60000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fff81b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+1163ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 9632: (ERROR 5) 9876: FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe DLLBase: 0x7ff7cb7a0000 SizeOfImage: 0x39b000 ParentDllBase: 0x0 OriginalBase: 0x7ff7cb7a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x22cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_elf.dll DLLBase: 0x7fff81fa0000 SizeOfImage: 0x3fb000 ParentDllBase: 0x7ff7cb7a0000 OriginalBase: 0x7fff81fa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff81fa0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x22250000000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x22250000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x22250000000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptprimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x0 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+6ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+6ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge.dll DLLBase: 0x7fff6fa60000 SizeOfImage: 0x11fb4000 ParentDllBase: 0x0 OriginalBase: 0x7fff6fa60000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6fa60000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dbghelp.dll DLLBase: 0x7fffaa2f0000 SizeOfImage: 0x241000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa2f0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ws2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\ffmpeg.dll DLLBase: 0x7fff6eb70000 SizeOfImage: 0x3fe000 ParentDllBase: 0x0 OriginalBase: 0x7fff6eb70000 ImplicitPathOptions: 0x1100 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\crypt32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x0 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.dll DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+22ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 10060: FullDllName: C:\WINDOWS\system32\wbem\wmiprvse.exe DLLBase: 0x7ff7b0770000 SizeOfImage: 0x7d000 ParentDllBase: 0x0 OriginalBase: 0x7ff7b0770000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wbemcomn.dll DLLBase: 0x7fff9c260000 SizeOfImage: 0x7a000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fff9c260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\FastProx.dll DLLBase: 0x7fff94840000 SizeOfImage: 0xf0000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fff94840000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NCObjAPI.DLL DLLBase: 0x7fff95a00000 SizeOfImage: 0x17000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fff95a00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fff94840000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemprox.dll DLLBase: 0x7fff94b20000 SizeOfImage: 0x12000 ParentDllBase: 0x0 OriginalBase: 0x7fff94b20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x8000 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff7b0770000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:52Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wbemsvc.dll DLLBase: 0x7fff95b60000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff95b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wbem\wmiutils.dll DLLBase: 0x7fff947a0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff947a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\Win32_DeviceGuard.dll DLLBase: 0x7fff81b90000 SizeOfImage: 0x20000 ParentDllBase: 0x0 OriginalBase: 0x7fff81b90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\wmitomi.dll DLLBase: 0x7fff6d100000 SizeOfImage: 0x33000 ParentDllBase: 0x0 OriginalBase: 0x7fff6d100000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\miutils.dll DLLBase: 0x7fff9b020000 SizeOfImage: 0x61000 ParentDllBase: 0x7fff6d100000 OriginalBase: 0x7fff9b020000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:52Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10440: FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe DLLBase: 0x7ff7bd730000 SizeOfImage: 0x489000 ParentDllBase: 0x0 OriginalBase: 0x7ff7bd730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xaacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20aac4 ImageDll InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2cabcc ImageDll LoadNotificationsSent InLegacyLists InIndexes ShimDll InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffaab90000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Secur32.dll DLLBase: 0x7fffa74f0000 SizeOfImage: 0xd000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffa74f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\VERSION.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WININET.dll DLLBase: 0x7fff9e110000 SizeOfImage: 0x289000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fff9e110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff7bd730000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SSPICLI.DLL DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa74f0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\ucrtbase.dll DLLBase: 0x7fff6cfe0000 SizeOfImage: 0x111000 ParentDllBase: 0x0 OriginalBase: 0x7fff6cfe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncRNWin32Lib.dll DLLBase: 0x7fff6cf90000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff6cf90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140_1.dll DLLBase: 0x7fff9e640000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff6cf90000 OriginalBase: 0x7fff9e640000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140.dll DLLBase: 0x7fff81b40000 SizeOfImage: 0x1e000 ParentDllBase: 0x7fff6cf90000 OriginalBase: 0x7fff81b40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140.dll DLLBase: 0x7fff6cf00000 SizeOfImage: 0x8d000 ParentDllBase: 0x7fff6cf90000 OriginalBase: 0x7fff6cf00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\LoggingPlatform.dll DLLBase: 0x7fff6ce50000 SizeOfImage: 0xab000 ParentDllBase: 0x0 OriginalBase: 0x7fff6ce50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+49ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff6ce50000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+49ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff6ce50000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+49ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+57ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\CRYPTSP.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+63ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+63ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\OneDriveTelemetryStable.dll DLLBase: 0x7fff6cbf0000 SizeOfImage: 0x258000 ParentDllBase: 0x0 OriginalBase: 0x7fff6cbf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff6cbf0000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+63ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncTelemetryExtensions.dll DLLBase: 0x7fff6caf0000 SizeOfImage: 0xff000 ParentDllBase: 0x0 OriginalBase: 0x7fff6caf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+88ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+94ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+94ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+111ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Networking.Connectivity.dll DLLBase: 0x7fffa8ef0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ef0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+111ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+111ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+111ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+111ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll DLLBase: 0x7fff81b20000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7fff81b20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+120ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncClient.dll DLLBase: 0x7fff6bed0000 SizeOfImage: 0xc1b000 ParentDllBase: 0x0 OriginalBase: 0x7fff6bed0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+126ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncHost.DLL DLLBase: 0x7fff6be50000 SizeOfImage: 0x80000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6be50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\WebView2Loader.dll DLLBase: 0x7fff6be20000 SizeOfImage: 0x2e000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6be20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc\gdiplus.dll DLLBase: 0x7fff8de50000 SizeOfImage: 0x1df000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff8de50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x102ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\COMCTL32.dll DLLBase: 0x7fff91bf0000 SizeOfImage: 0x29a000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff91bf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x1028a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140_ATOMIC_WAIT.dll DLLBase: 0x7fff6bc20000 SizeOfImage: 0x14000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6bc20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\LogUploader.dll DLLBase: 0x7fff6bc40000 SizeOfImage: 0x129000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6bc40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\UpdateRingSettings.dll DLLBase: 0x7fff6bd70000 SizeOfImage: 0xae000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6bd70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncEvents.dll DLLBase: 0x7fff6bbf0000 SizeOfImage: 0x24000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6bbf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncViews.dll DLLBase: 0x7fff6b890000 SizeOfImage: 0x352000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6b890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncSessions.dll DLLBase: 0x7fff6b270000 SizeOfImage: 0x61a000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6b270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL DLLBase: 0x7fff8eb40000 SizeOfImage: 0x431000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff8eb40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFS.DLL DLLBase: 0x7fff6b170000 SizeOfImage: 0xfc000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6b170000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\wer.dll DLLBase: 0x7fffaa1f0000 SizeOfImage: 0xf6000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fffaa1f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncCxP.dll DLLBase: 0x7fff6a400000 SizeOfImage: 0x96000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6a400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\SyncEngine.DLL DLLBase: 0x7fff6a4a0000 SizeOfImage: 0xccc000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6a4a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncSqlite3.dll DLLBase: 0x7fff6a350000 SizeOfImage: 0xaf000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6a350000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Telemetry.dll DLLBase: 0x7fff6a240000 SizeOfImage: 0x109000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff6a240000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff6bed0000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\credui.dll DLLBase: 0x7fff92220000 SizeOfImage: 0x1c000 ParentDllBase: 0x7fff6b270000 OriginalBase: 0x7fff92220000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Qml.dll DLLBase: 0x7fff69ad0000 SizeOfImage: 0x36a000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff69ad0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Quick.dll DLLBase: 0x7fff69e40000 SizeOfImage: 0x3ff000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff69e40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Core.dll DLLBase: 0x7fff694f0000 SizeOfImage: 0x5d1000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff694f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Gui.dll DLLBase: 0x7fff68e60000 SizeOfImage: 0x685000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff68e60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+127ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5WinExtras.dll DLLBase: 0x7fff688d0000 SizeOfImage: 0x3d000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff688d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xc22cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed DontCallForThreads ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Widgets.dll DLLBase: 0x7fff68910000 SizeOfImage: 0x548000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff68910000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\libcrypto-3-x64.dll DLLBase: 0x7fff68280000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff6b890000 OriginalBase: 0x7fff68280000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\ncrypt.dll DLLBase: 0x7fffa9ab0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fff6b270000 OriginalBase: 0x7fffa9ab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\adal.dll DLLBase: 0x7fff68100000 SizeOfImage: 0x176000 ParentDllBase: 0x7fff6b270000 OriginalBase: 0x7fff68100000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fff6a4a0000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\RstrtMgr.DLL DLLBase: 0x7fff680b0000 SizeOfImage: 0x44000 ParentDllBase: 0x7fff6a4a0000 OriginalBase: 0x7fff680b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MPR.dll DLLBase: 0x7fff9d370000 SizeOfImage: 0x21000 ParentDllBase: 0x7fff694f0000 OriginalBase: 0x7fff9d370000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\NETAPI32.dll DLLBase: 0x7fff95f70000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff694f0000 OriginalBase: 0x7fff95f70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINMM.dll DLLBase: 0x7fff82bc0000 SizeOfImage: 0x35000 ParentDllBase: 0x7fff694f0000 OriginalBase: 0x7fff82bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5Network.dll DLLBase: 0x7fff67f60000 SizeOfImage: 0x144000 ParentDllBase: 0x7fff69ad0000 OriginalBase: 0x7fff67f60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Qt5QmlModels.dll DLLBase: 0x7fff67ef0000 SizeOfImage: 0x6e000 ParentDllBase: 0x7fff69e40000 OriginalBase: 0x7fff67ef0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140_1.dll DLLBase: 0x7fff84a50000 SizeOfImage: 0x9000 ParentDllBase: 0x7fff694f0000 OriginalBase: 0x7fff84a50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x7fff68e60000 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\WnsClientApi.dll DLLBase: 0x7fff67e00000 SizeOfImage: 0xe3000 ParentDllBase: 0x7fff6a4a0000 OriginalBase: 0x7fff67e00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7fff68e60000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+141ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fff67f60000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+157ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\libssl-3-x64.dll DLLBase: 0x7fff67cc0000 SizeOfImage: 0x136000 ParentDllBase: 0x7fff67f60000 OriginalBase: 0x7fff67cc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+159ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0xc22cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\NTASN1.dll DLLBase: 0x7fffa9a60000 SizeOfImage: 0x3f000 ParentDllBase: 0x7fffa9ab0000 OriginalBase: 0x7fffa9a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+189ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Wscapi.dll DLLBase: 0x7fff81db0000 SizeOfImage: 0x46000 ParentDllBase: 0x0 OriginalBase: 0x7fff81db0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+221ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+237ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+283ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+378ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncCxPImpl.DLL DLLBase: 0x7fff67bd0000 SizeOfImage: 0xe3000 ParentDllBase: 0x0 OriginalBase: 0x7fff67bd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+378ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\atlthunk.dll DLLBase: 0x7fff9aa50000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff9aa50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+401ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+401ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSNtfs.DLL DLLBase: 0x7fff67b00000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff67b00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+410ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSNtfsWB.dll DLLBase: 0x7fff67a70000 SizeOfImage: 0x8b000 ParentDllBase: 0x0 OriginalBase: 0x7fff67a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+410ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSDbfsWB.dll DLLBase: 0x7fff67a30000 SizeOfImage: 0x38000 ParentDllBase: 0x0 OriginalBase: 0x7fff67a30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+410ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFSCache.dll DLLBase: 0x7fff679a0000 SizeOfImage: 0x86000 ParentDllBase: 0x0 OriginalBase: 0x7fff679a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+427ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSyncFALWB.dll DLLBase: 0x7fff678f0000 SizeOfImage: 0xae000 ParentDllBase: 0x0 OriginalBase: 0x7fff678f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+428ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\cldapi.dll DLLBase: 0x7fff8bb70000 SizeOfImage: 0x2f000 ParentDllBase: 0x7fff678f0000 OriginalBase: 0x7fff8bb70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+428ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\FLTLIB.DLL DLLBase: 0x7fffa8a70000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff8bb70000 OriginalBase: 0x7fffa8a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+465ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WindowsCodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x7fff91bf0000 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+473ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSync.Resources.dll DLLBase: 0x1a79e340000 SizeOfImage: 0x3c0000 ParentDllBase: 0x0 OriginalBase: 0x180000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+505ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\system32\mlang.dll DLLBase: 0x7fff832e0000 SizeOfImage: 0x44000 ParentDllBase: 0x0 OriginalBase: 0x7fff832e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+505ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileSync.LocalizedResources.dll DLLBase: 0x1a79e760000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x180000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+505ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+557ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+593ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\platforms\qwindows.dll DLLBase: 0x7fff67740000 SizeOfImage: 0x16c000 ParentDllBase: 0x0 OriginalBase: 0x7fff67740000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+616ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+620ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+620ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll DLLBase: 0x7fff9ad70000 SizeOfImage: 0x18000 ParentDllBase: 0x0 OriginalBase: 0x7fff9ad70000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:54Z (+817ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+817ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+817ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:54Z (+817ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DPAPI.DLL DLLBase: 0x7fffaa610000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffaa610000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+824ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\webio.dll DLLBase: 0x7fffa9060000 SizeOfImage: 0xc3000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa9060000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+837ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+839ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Microsoft.UI.Xaml.dll DLLBase: 0x7fff67110000 SizeOfImage: 0x628000 ParentDllBase: 0x0 OriginalBase: 0x7fff67110000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+901ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff67110000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+901ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll DLLBase: 0x7fff90ec0000 SizeOfImage: 0x137000 ParentDllBase: 0x0 OriginalBase: 0x7fff90ec0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+901ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff9e450000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\vaultcli.dll DLLBase: 0x7fff8eae0000 SizeOfImage: 0x4f000 ParentDllBase: 0x0 OriginalBase: 0x7fff8eae0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\aadWamExtension.dll DLLBase: 0x7fff86c00000 SizeOfImage: 0x38000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+916ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WindowManagementAPI.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DataExchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+932ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+947ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+947ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MicrosoftAccountWAMExtension.dll DLLBase: 0x7fff67060000 SizeOfImage: 0xac000 ParentDllBase: 0x0 OriginalBase: 0x7fff67060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+963ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+963ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\Microsoft.ReactNative.dll DLLBase: 0x7fff66d60000 SizeOfImage: 0x2f5000 ParentDllBase: 0x0 OriginalBase: 0x7fff66d60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+979ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\MSVCP140_APP.dll DLLBase: 0x1a7a5900000 SizeOfImage: 0x3e000 ParentDllBase: 0x7fff66d60000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+979ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140_1_APP.dll DLLBase: 0x1a7a5950000 SizeOfImage: 0x3000 ParentDllBase: 0x7fff66d60000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+979ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\VCRUNTIME140_APP.dll DLLBase: 0x1a7a5970000 SizeOfImage: 0x4000 ParentDllBase: 0x7fff66d60000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+979ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\CheckboxWindows.dll DLLBase: 0x7fff66860000 SizeOfImage: 0x37000 ParentDllBase: 0x0 OriginalBase: 0x7fff66860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1026ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\ReactNativePicker.dll DLLBase: 0x7fff668a0000 SizeOfImage: 0x3f000 ParentDllBase: 0x0 OriginalBase: 0x7fff668a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1026ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\rometadata.dll DLLBase: 0x7fff90300000 SizeOfImage: 0x39000 ParentDllBase: 0x7fffaab90000 OriginalBase: 0x7fff90300000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1036ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\RNSVG.dll DLLBase: 0x7fff66c40000 SizeOfImage: 0x111000 ParentDllBase: 0x0 OriginalBase: 0x7fff66c40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1042ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1057ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1057ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1057ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1057ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1057ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\familysafetyext.dll DLLBase: 0x7fff84a20000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fff84a20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1073ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\wpc.dll DLLBase: 0x7fff66ad0000 SizeOfImage: 0x169000 ParentDllBase: 0x0 OriginalBase: 0x7fff66ad0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1073ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\Normaliz.dll DLLBase: 0x7fffad880000 SizeOfImage: 0x8000 ParentDllBase: 0x7fff66ad0000 OriginalBase: 0x7fffad880000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1073ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\FileCoAuthLib64.dll DLLBase: 0x7fff66a90000 SizeOfImage: 0x37000 ParentDllBase: 0x0 OriginalBase: 0x7fff66a90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1089ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wlidprov.dll DLLBase: 0x7fff94020000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff94020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1089ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\coreprivacysettingsstore.dll DLLBase: 0x7fffa99d0000 SizeOfImage: 0x30000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffa99d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1089ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Services.TargetedContent.dll DLLBase: 0x7fff66990000 SizeOfImage: 0xf4000 ParentDllBase: 0x0 OriginalBase: 0x7fff66990000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1089ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1100ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DSREG.DLL DLLBase: 0x7fffa4bb0000 SizeOfImage: 0x164000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa4bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1120ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WKSCLI.DLL DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff95f70000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1120ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1120ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\hermes.dll DLLBase: 0x7fff66270000 SizeOfImage: 0x477000 ParentDllBase: 0x0 OriginalBase: 0x7fff66270000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1136ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\icuin.dll DLLBase: 0x1a7a5bd0000 SizeOfImage: 0x8000 ParentDllBase: 0x7fff66270000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1136ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\icuuc.dll DLLBase: 0x1a7a5be0000 SizeOfImage: 0x9000 ParentDllBase: 0x7fff66270000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1136ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\icu.DLL DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x1a7a5be0000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1136ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1136ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fff96d20000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1136ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\explorerframe.dll DLLBase: 0x7fff8c2c0000 SizeOfImage: 0x2c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c2c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1151ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1151ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Core.TextInput.dll DLLBase: 0x7fff94c50000 SizeOfImage: 0x16c000 ParentDllBase: 0x0 OriginalBase: 0x7fff94c50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1151ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fff94c50000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1151ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1182ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mssprxy.dll DLLBase: 0x7fff661d0000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fff661d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1198ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1206ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1220ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntshrui.dll DLLBase: 0x7fff8a560000 SizeOfImage: 0xad000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff8a560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1292ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cscapi.dll DLLBase: 0x7fff923b0000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7fff923b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1292ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff66990000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+1339ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+1339ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\BitsProxy.dll DLLBase: 0x7fff658b0000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff658b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+5452ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:06Z (+11842ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10720: FullDllName: C:\WINDOWS\System32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\qmgr.dll DLLBase: 0x7fff666f0000 SizeOfImage: 0x169000 ParentDllBase: 0x0 OriginalBase: 0x7fff666f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\bitsperf.dll DLLBase: 0x7fff6f7c0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fff6f7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\FlightSettings.dll DLLBase: 0x7fff9a750000 SizeOfImage: 0x11e000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a750000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9a750000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\netprofm.dll DLLBase: 0x7fffa35b0000 SizeOfImage: 0x65000 ParentDllBase: 0x0 OriginalBase: 0x7fffa35b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\npmproxy.dll DLLBase: 0x7fffa00b0000 SizeOfImage: 0x19000 ParentDllBase: 0x0 OriginalBase: 0x7fffa00b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bitsigd.dll DLLBase: 0x7fff66970000 SizeOfImage: 0x1b000 ParentDllBase: 0x0 OriginalBase: 0x7fff66970000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\upnp.dll DLLBase: 0x7fff668f0000 SizeOfImage: 0x7a000 ParentDllBase: 0x0 OriginalBase: 0x7fff668f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WINHTTP.dll DLLBase: 0x7fffa0f80000 SizeOfImage: 0x11e000 ParentDllBase: 0x7fff668f0000 OriginalBase: 0x7fffa0f80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff668f0000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff668f0000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SSDPAPI.dll DLLBase: 0x7fffa01e0000 SizeOfImage: 0x18000 ParentDllBase: 0x7fff668f0000 OriginalBase: 0x7fffa01e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+218ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AppXDeploymentClient.dll DLLBase: 0x7fffa3430000 SizeOfImage: 0x16f000 ParentDllBase: 0x0 OriginalBase: 0x7fffa3430000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+218ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ESENT.dll DLLBase: 0x7fff9b3c0000 SizeOfImage: 0x422000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fff9b3c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+218ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+218ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\WSMAUTO.DLL DLLBase: 0x7fff66190000 SizeOfImage: 0x30000 ParentDllBase: 0x0 OriginalBase: 0x7fff66190000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\miutils.dll DLLBase: 0x7fff9b020000 SizeOfImage: 0x61000 ParentDllBase: 0x7fff66190000 OriginalBase: 0x7fff9b020000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\WsmSvc.DLL DLLBase: 0x7fff65ee0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff66190000 OriginalBase: 0x7fff65ee0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\mi.dll DLLBase: 0x7fff9b090000 SizeOfImage: 0x27000 ParentDllBase: 0x7fff65ee0000 OriginalBase: 0x7fff9b090000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\pcwum.dll DLLBase: 0x1dae7800000 SizeOfImage: 0x5000 ParentDllBase: 0x7fff65ee0000 OriginalBase: 0x180000000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\Windows\System32\DSROLE.dll DLLBase: 0x7fffa4740000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff65ee0000 OriginalBase: 0x7fffa4740000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Userenv.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\gpapi.dll DLLBase: 0x7fffa9620000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fffa9620000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wkscli.dll DLLBase: 0x7fffa24c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff65ee0000 OriginalBase: 0x7fffa24c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fff65ee0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\webio.dll DLLBase: 0x7fffa9060000 SizeOfImage: 0xc3000 ParentDllBase: 0x7fffa0f80000 OriginalBase: 0x7fffa9060000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+249ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+249ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+249ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa6da0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+249ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa95b0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+251ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\rasadhlp.dll DLLBase: 0x7fffa0620000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+253ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\fwpuclnt.dll DLLBase: 0x7fffa0590000 SizeOfImage: 0x86000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+253ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4332ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\execmodelclient.dll DLLBase: 0x7fff90e60000 SizeOfImage: 0x5d000 ParentDllBase: 0x0 OriginalBase: 0x7fff90e60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\coml2.dll DLLBase: 0x7fffac1e0000 SizeOfImage: 0x7a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreCommonProxyStub.dll DLLBase: 0x7fff98120000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fff98120000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll DLLBase: 0x7fffa7330000 SizeOfImage: 0x14000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fffa7330000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4334ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\vssapi.DLL DLLBase: 0x7fffa1ba0000 SizeOfImage: 0x17d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1ba0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\VssTrace.DLL DLLBase: 0x7fffa1a90000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa1a90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ES.DLL DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa0a40000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\BitsProxy.dll DLLBase: 0x7fff658b0000 SizeOfImage: 0x17000 ParentDllBase: 0x0 OriginalBase: 0x7fff658b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4347ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\connectionattributionapi.dll DLLBase: 0x7fff65890000 SizeOfImage: 0x13000 ParentDllBase: 0x7fff666f0000 OriginalBase: 0x7fff65890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:59Z (+4365ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10768: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\ssdpsrv.dll DLLBase: 0x7fff66210000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fff66210000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\FirewallAPI.dll DLLBase: 0x7fffa8080000 SizeOfImage: 0xbd000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\fwbase.dll DLLBase: 0x7fffa8030000 SizeOfImage: 0x4c000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fffa8030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7fff66210000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL DLLBase: 0x7fffa1710000 SizeOfImage: 0x1f000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa1710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL DLLBase: 0x7fffa0ca0000 SizeOfImage: 0x25000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa0ca0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7fff66210000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff66210000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mswsock.dll DLLBase: 0x7fffa95b0000 SizeOfImage: 0x6b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa95b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\FWPolicyIOMgr.dll DLLBase: 0x7fff9de50000 SizeOfImage: 0x6f000 ParentDllBase: 0x7fffa8080000 OriginalBase: 0x7fff9de50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+171ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WINNSI.DLL DLLBase: 0x7fffa6da0000 SizeOfImage: 0xf000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffa6da0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+171ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\POWRPROF.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff66210000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+171ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+171ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10812: FullDllName: C:\WINDOWS\system32\SearchIndexer.exe DLLBase: 0x7ff607390000 SizeOfImage: 0xfb000 ParentDllBase: 0x0 OriginalBase: 0x7ff607390000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MSSRCH.DLL DLLBase: 0x7fff8fd40000 SizeOfImage: 0x2ef000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fff8fd40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\TQUERY.DLL DLLBase: 0x7fff8f9d0000 SizeOfImage: 0x366000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fff8f9d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SearchIndexerCore.dll DLLBase: 0x7fff8f8e0000 SizeOfImage: 0xe4000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fff8f8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7fff8f9d0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff8f9d0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\sspicli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x0 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rmclient.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+30ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mssprxy.dll DLLBase: 0x7fff661d0000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fff661d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+30ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:34:55Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+53ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\vssapi.dll DLLBase: 0x7fffa1ba0000 SizeOfImage: 0x17d000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffa1ba0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\VssTrace.DLL DLLBase: 0x7fffa1a90000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa1a90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+62ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\samcli.dll DLLBase: 0x7fffa8180000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa1ba0000 OriginalBase: 0x7fffa8180000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\SAMLIB.dll DLLBase: 0x7fffa81a0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffa8180000 OriginalBase: 0x7fffa81a0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+77ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ES.DLL DLLBase: 0x7fffa0a40000 SizeOfImage: 0x78000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0a40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+82ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7ff607390000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+82ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\usermgrcli.dll DLLBase: 0x7fffa4260000 SizeOfImage: 0x17000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fffa4260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+82ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\sxs.dll DLLBase: 0x7fffaa710000 SizeOfImage: 0xa1000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaa710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:34:55Z (+97ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSWB7.dll DLLBase: 0x7fff82da0000 SizeOfImage: 0x48000 ParentDllBase: 0x0 OriginalBase: 0x7fff82da0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+12376ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\elscore.dll DLLBase: 0x7fff6d260000 SizeOfImage: 0x19000 ParentDllBase: 0x7fff8fd40000 OriginalBase: 0x7fff6d260000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+12376ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\ElsLad.dll DLLBase: 0x7fff64000000 SizeOfImage: 0xb2000 ParentDllBase: 0x0 OriginalBase: 0x7fff64000000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+12376ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff64000000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+12376ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 3316: FullDllName: C:\WINDOWS\system32\DllHost.exe DLLBase: 0x7ff611bb0000 SizeOfImage: 0xa000 ParentDllBase: 0x0 OriginalBase: 0x7ff611bb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff611bb0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff611bb0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2507.26.0_x64__8wekyb3d8bbwe\NotepadExplorerCommand\NotepadExplorerCommand.dll DLLBase: 0x7fff64550000 SizeOfImage: 0x4e000 ParentDllBase: 0x0 OriginalBase: 0x7fff64550000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHELL32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHLWAPI.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\VCRUNTIME140.dll DLLBase: 0x7fff64530000 SizeOfImage: 0x1e000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fff64530000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\MSVCP140.dll DLLBase: 0x7fff644a0000 SizeOfImage: 0x8d000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fff644a0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\VCRUNTIME140_1.dll DLLBase: 0x7fff6d230000 SizeOfImage: 0xc000 ParentDllBase: 0x7fff64550000 OriginalBase: 0x7fff6d230000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+27ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SHCORE.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+29ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:04Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+39ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:04Z (+56ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 9288: FullDllName: C:\WINDOWS\System32\SearchProtocolHost.exe DLLBase: 0x7ff761670000 SizeOfImage: 0xa9000 ParentDllBase: 0x0 OriginalBase: 0x7ff761670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff761670000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff761670000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\imm32.dll DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x7ff761670000 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff761670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7ff761670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mssprxy.dll DLLBase: 0x7fff661d0000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fff661d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\mssph.dll DLLBase: 0x7fff640c0000 SizeOfImage: 0x43000 ParentDllBase: 0x0 OriginalBase: 0x7fff640c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fff640c0000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\AUTHZ.dll DLLBase: 0x7fffa83a0000 SizeOfImage: 0x50000 ParentDllBase: 0x7fff640c0000 OriginalBase: 0x7fffa83a0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntmarta.dll DLLBase: 0x7fffaa190000 SizeOfImage: 0x36000 ParentDllBase: 0x7fff640c0000 OriginalBase: 0x7fffaa190000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7ff761670000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\propsys.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x0 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shell32.dll DLLBase: 0x7fffacb90000 SizeOfImage: 0x74d000 ParentDllBase: 0x0 OriginalBase: 0x7fffacb90000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffacb90000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.FileExplorer.Common.dll DLLBase: 0x7fff89a00000 SizeOfImage: 0xc2000 ParentDllBase: 0x0 OriginalBase: 0x7fff89a00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\cldapi.dll DLLBase: 0x7fff8bb70000 SizeOfImage: 0x2f000 ParentDllBase: 0x7fff89a00000 OriginalBase: 0x7fff8bb70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:07Z (+31ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10172: FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe DLLBase: 0x7ff713d70000 SizeOfImage: 0x1b4000 ParentDllBase: 0x0 OriginalBase: 0x7ff713d70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xa2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll DLLBase: 0x7fff9ded0000 SizeOfImage: 0x1bb000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fff9ded0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9ded0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 9268: FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe DLLBase: 0x7ff713d70000 SizeOfImage: 0x1b4000 ParentDllBase: 0x0 OriginalBase: 0x7ff713d70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0xa2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WINTRUST.dll DLLBase: 0x7fffaaff0000 SizeOfImage: 0x84000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffaaff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpClient.dll DLLBase: 0x7fff9ded0000 SizeOfImage: 0x1bb000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fff9ded0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7ff713d70000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+26ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MSASN1.dll DLLBase: 0x7fffa98b0000 SizeOfImage: 0x13000 ParentDllBase: 0x7fffaaff0000 OriginalBase: 0x7fffa98b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\version.dll DLLBase: 0x7fffa74c0000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fffa74c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+28ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+30ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 1316: FullDllName: C:\WINDOWS\system32\conhost.exe DLLBase: 0x7ff724440000 SizeOfImage: 0x100000 ParentDllBase: 0x0 OriginalBase: 0x7ff724440000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffa6ce0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msctf.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x0 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.dll DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+20ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 1044: FullDllName: C:\WINDOWS\system32\conhost.exe DLLBase: 0x7ff724440000 SizeOfImage: 0x100000 ParentDllBase: 0x0 OriginalBase: 0x7ff724440000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+3ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fffa6ce0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msctf.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x0 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.dll DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:10Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 9224: FullDllName: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe DLLBase: 0x7ff67f880000 SizeOfImage: 0x85000 ParentDllBase: 0x0 OriginalBase: 0x7ff67f880000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff67f880000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7ff67f880000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffac6f0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxgi.dll DLLBase: 0x7fffa6ec0000 SizeOfImage: 0x13e000 ParentDllBase: 0x7ff67f880000 OriginalBase: 0x7fffa6ec0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\wincorlib.DLL DLLBase: 0x7fff9aae0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff67f880000 OriginalBase: 0x7fff9aae0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fff9aae0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x0 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\directxdatabasehelper.dll DLLBase: 0x7fffa6e50000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6ec0000 OriginalBase: 0x7fffa6e50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffa6e50000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fff9cfc0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Xaml.dll DLLBase: 0x7fff98b50000 SizeOfImage: 0x1110000 ParentDllBase: 0x0 OriginalBase: 0x7fff98b50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\iertutil.dll DLLBase: 0x7fff9c2e0000 SizeOfImage: 0x2ca000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c2e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\netutils.dll DLLBase: 0x7fffa81d0000 SizeOfImage: 0xd000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fffa81d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\srvcli.dll DLLBase: 0x7fff9cfe0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9c2e0000 OriginalBase: 0x7fff9cfe0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\twinapi.appcore.dll DLLBase: 0x7fffa1850000 SizeOfImage: 0x238000 ParentDllBase: 0x0 OriginalBase: 0x7fffa1850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.dll DLLBase: 0x7fff99c70000 SizeOfImage: 0x158000 ParentDllBase: 0x0 OriginalBase: 0x7fff99c70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+21ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\urlmon.dll DLLBase: 0x7fff9c680000 SizeOfImage: 0x1e5000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9c680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x7fff9c680000 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dxcore.dll DLLBase: 0x7fffa7030000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffa7030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.QuickActions.dll DLLBase: 0x7fff63730000 SizeOfImage: 0x5c7000 ParentDllBase: 0x0 OriginalBase: 0x7fff63730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff63730000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WindowsCodecs.dll DLLBase: 0x7fffa4d20000 SizeOfImage: 0x23f000 ParentDllBase: 0x7fff63730000 OriginalBase: 0x7fffa4d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d2d1.dll DLLBase: 0x7fffa5670000 SizeOfImage: 0x643000 ParentDllBase: 0x7fff63730000 OriginalBase: 0x7fffa5670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\QuickActionsDataModel.dll DLLBase: 0x7fff636c0000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff63730000 OriginalBase: 0x7fff636c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d11.dll DLLBase: 0x7fffa5400000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5400000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll DLLBase: 0x7fff88140000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fff88140000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ShellExperiences\NetworkUX.dll DLLBase: 0x7fff634c0000 SizeOfImage: 0x1f6000 ParentDllBase: 0x0 OriginalBase: 0x7fff634c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\MobileNetworking.dll DLLBase: 0x7fffa0b60000 SizeOfImage: 0x22000 ParentDllBase: 0x7fff634c0000 OriginalBase: 0x7fffa0b60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\d3d10warp.dll DLLBase: 0x7fffa25b0000 SizeOfImage: 0x5b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa25b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\DevicesFlowUI.dll DLLBase: 0x7fff63250000 SizeOfImage: 0x26d000 ParentDllBase: 0x0 OriginalBase: 0x7fff63250000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.ActionCenter.dll DLLBase: 0x7fff62d80000 SizeOfImage: 0x4cc000 ParentDllBase: 0x0 OriginalBase: 0x7fff62d80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+36ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dwrite.dll DLLBase: 0x7fffa5ce0000 SizeOfImage: 0x26b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa5ce0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+36ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll DLLBase: 0x7fff8d020000 SizeOfImage: 0x5d4000 ParentDllBase: 0x0 OriginalBase: 0x7fff8d020000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffa5ce0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Storage.ApplicationData.dll DLLBase: 0x7fff87750000 SizeOfImage: 0x60000 ParentDllBase: 0x0 OriginalBase: 0x7fff87750000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\MrmCoreR.dll DLLBase: 0x7fff9a620000 SizeOfImage: 0x11f000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a620000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositoryclient.dll DLLBase: 0x7fff9ab50000 SizeOfImage: 0x50000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9ab50000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.System.Launcher.dll DLLBase: 0x7fff96d20000 SizeOfImage: 0x181000 ParentDllBase: 0x0 OriginalBase: 0x7fff96d20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\profapi.dll DLLBase: 0x7fffaa930000 SizeOfImage: 0x29000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fffaa930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\languageoverlayutil.dll DLLBase: 0x7fff9a980000 SizeOfImage: 0x43000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\bcp47mrm.dll DLLBase: 0x7fff9a940000 SizeOfImage: 0x34000 ParentDllBase: 0x7fff9a620000 OriginalBase: 0x7fff9a940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+41ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msctf.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+46ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll DLLBase: 0x7fff91a60000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7fff91a60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\execmodelproxy.dll DLLBase: 0x7fff90680000 SizeOfImage: 0x14000 ParentDllBase: 0x0 OriginalBase: 0x7fff90680000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\RMCLIENT.dll DLLBase: 0x7fffa72f0000 SizeOfImage: 0x36000 ParentDllBase: 0x7fffa1850000 OriginalBase: 0x7fffa72f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\InputHost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\Windows\System32\UiaManager.dll DLLBase: 0x7fff90560000 SizeOfImage: 0xe1000 ParentDllBase: 0x0 OriginalBase: 0x7fff90560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WindowManagementAPI.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x7fff99c70000 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll DLLBase: 0x7fff94c50000 SizeOfImage: 0x16c000 ParentDllBase: 0x0 OriginalBase: 0x7fff94c50000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextInputFramework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fff94c50000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+57ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.UI.Immersive.dll DLLBase: 0x7fff98a00000 SizeOfImage: 0x14d000 ParentDllBase: 0x0 OriginalBase: 0x7fff98a00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DataExchange.dll DLLBase: 0x7fff8cc60000 SizeOfImage: 0x5a000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cc60000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+57ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Windows.UI.Xaml.Controls.dll DLLBase: 0x7fff981e0000 SizeOfImage: 0x329000 ParentDllBase: 0x0 OriginalBase: 0x7fff981e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+91ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.dll DLLBase: 0x7fff98860000 SizeOfImage: 0x198000 ParentDllBase: 0x0 OriginalBase: 0x7fff98860000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+104ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+104ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windowsudk.shellcommon.dll DLLBase: 0x7fff95490000 SizeOfImage: 0x55e000 ParentDllBase: 0x0 OriginalBase: 0x7fff95490000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+109ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\directmanipulation.dll DLLBase: 0x7fff9f890000 SizeOfImage: 0xa3000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+109ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dcomp.dll DLLBase: 0x7fffa60b0000 SizeOfImage: 0x22a000 ParentDllBase: 0x0 OriginalBase: 0x7fffa60b0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+109ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Microsoft.Internal.WarpPal.dll DLLBase: 0x7fffa5cc0000 SizeOfImage: 0x19000 ParentDllBase: 0x7fffa60b0000 OriginalBase: 0x7fffa5cc0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+109ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NotificationControllerPS.dll DLLBase: 0x7fff8cfa0000 SizeOfImage: 0x6e000 ParentDllBase: 0x0 OriginalBase: 0x7fff8cfa0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+109ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\ShellComponents\WindowsInternal.ShellUI.dll DLLBase: 0x7fff858c0000 SizeOfImage: 0x2d000 ParentDllBase: 0x0 OriginalBase: 0x7fff858c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+118ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Globalization.Fontgroups.dll DLLBase: 0x7fff90290000 SizeOfImage: 0x15000 ParentDllBase: 0x0 OriginalBase: 0x7fff90290000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+120ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\fontgroupsoverride.dll DLLBase: 0x7fff9aab0000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff90290000 OriginalBase: 0x7fff9aab0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+120ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.ApplicationModel.dll DLLBase: 0x7fff960b0000 SizeOfImage: 0xd4000 ParentDllBase: 0x0 OriginalBase: 0x7fff960b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+120ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Energy.dll DLLBase: 0x7fff8c640000 SizeOfImage: 0x50000 ParentDllBase: 0x0 OriginalBase: 0x7fff8c640000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+120ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Graphics.dll DLLBase: 0x7fffa0cd0000 SizeOfImage: 0x91000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0cd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+120ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\NotificationIntelligencePlatform.dll DLLBase: 0x7fff642b0000 SizeOfImage: 0x37000 ParentDllBase: 0x0 OriginalBase: 0x7fff642b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+152ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\dmiso8601utils.dll DLLBase: 0x7fff8e990000 SizeOfImage: 0xa000 ParentDllBase: 0x7fff642b0000 OriginalBase: 0x7fff8e990000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+152ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msxml6.dll DLLBase: 0x7fff9a1e0000 SizeOfImage: 0x23d000 ParentDllBase: 0x0 OriginalBase: 0x7fff9a1e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+152ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\USERENV.dll DLLBase: 0x7fffa9650000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac7e0000 OriginalBase: 0x7fffa9650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+152ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffaa930000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+152ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+152ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\PhotoMetadataHandler.dll DLLBase: 0x7fff973a0000 SizeOfImage: 0xa5000 ParentDllBase: 0x0 OriginalBase: 0x7fff973a0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\RTMediaFrame.dll DLLBase: 0x7fff85970000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff85970000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\threadpoolwinrt.dll DLLBase: 0x7fff9f160000 SizeOfImage: 0x16000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f160000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+234ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\pfclient.dll DLLBase: 0x7fffa6e30000 SizeOfImage: 0x12000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffa6e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+234ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+391ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\msftedit.dll DLLBase: 0x7fff943f0000 SizeOfImage: 0x330000 ParentDllBase: 0x0 OriginalBase: 0x7fff943f0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+391ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\globinputhost.dll DLLBase: 0x7fff943b0000 SizeOfImage: 0x38000 ParentDllBase: 0x7fff98860000 OriginalBase: 0x7fff943b0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+391ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff98b50000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+405ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+405ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\audioses.dll DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+422ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MMDevApi.dll DLLBase: 0x7fffa0200000 SizeOfImage: 0xa2000 ParentDllBase: 0x0 OriginalBase: 0x7fffa0200000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+422ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+429ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffaa560000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+429ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+429ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\rdpendp.dll DLLBase: 0x7fffa8e30000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+429ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+429ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\AVRT.dll DLLBase: 0x7fffa3350000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff9f940000 OriginalBase: 0x7fffa3350000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+437ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll DLLBase: 0x7fffa7330000 SizeOfImage: 0x14000 ParentDllBase: 0x7fff9f940000 OriginalBase: 0x7fffa7330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+437ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10232: FullDllName: C:\Windows\System32\RuntimeBroker.exe DLLBase: 0x7ff68a5e0000 SizeOfImage: 0x1f000 ParentDllBase: 0x0 OriginalBase: 0x7ff68a5e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cd PackagedBinary ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7ff68a5e0000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\windows.storage.dll DLLBase: 0x7fffa7670000 SizeOfImage: 0x860000 ParentDllBase: 0x0 OriginalBase: 0x7fffa7670000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll DLLBase: 0x7fffa10b0000 SizeOfImage: 0x644000 ParentDllBase: 0x0 OriginalBase: 0x7fffa10b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\CapabilityAccessManagerClient.dll DLLBase: 0x7fff86c40000 SizeOfImage: 0x74000 ParentDllBase: 0x0 OriginalBase: 0x7fff86c40000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+11ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shlwapi.dll DLLBase: 0x7fffac7e0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac7e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CFGMGR32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\StructuredQuery.dll DLLBase: 0x7fff9bb60000 SizeOfImage: 0xc6000 ParentDllBase: 0x0 OriginalBase: 0x7fff9bb60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\icu.dll DLLBase: 0x7fff9b8b0000 SizeOfImage: 0x29e000 ParentDllBase: 0x7fff9bb60000 OriginalBase: 0x7fff9b8b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.StateRepositoryPS.dll DLLBase: 0x7fff96eb0000 SizeOfImage: 0xc4000 ParentDllBase: 0x0 OriginalBase: 0x7fff96eb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Windows.Storage.Search.dll DLLBase: 0x7fff96210000 SizeOfImage: 0x13b000 ParentDllBase: 0x0 OriginalBase: 0x7fff96210000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\edputil.dll DLLBase: 0x7fff961e0000 SizeOfImage: 0x29000 ParentDllBase: 0x7fffa7670000 OriginalBase: 0x7fff961e0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+43ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WinTypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+58ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffab120000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+62ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 10344: FullDllName: C:\WINDOWS\system32\AUDIODG.EXE DLLBase: 0x7ff766e40000 SizeOfImage: 0xdf000 ParentDllBase: 0x0 OriginalBase: 0x7ff766e40000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff766e40000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff766e40000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff766e40000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7ff766e40000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MMDevAPI.DLL DLLBase: 0x7fffa0200000 SizeOfImage: 0xa2000 ParentDllBase: 0x7ff766e40000 OriginalBase: 0x7fffa0200000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7ff766e40000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\AudioSes.dll DLLBase: 0x7fff9f940000 SizeOfImage: 0x1c2000 ParentDllBase: 0x0 OriginalBase: 0x7fff9f940000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\DEVOBJ.dll DLLBase: 0x7fffaa560000 SizeOfImage: 0x2d000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa560000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winsta.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa0200000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\audioeng.dll DLLBase: 0x7fff62b60000 SizeOfImage: 0x1ec000 ParentDllBase: 0x0 OriginalBase: 0x7fff62b60000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+15ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff62b60000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+15ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\PROPSYS.dll DLLBase: 0x7fffa4a70000 SizeOfImage: 0x10d000 ParentDllBase: 0x7fff62b60000 OriginalBase: 0x7fffa4a70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rdpendp.dll DLLBase: 0x7fffa8e30000 SizeOfImage: 0x57000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8e30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MF.dll DLLBase: 0x7fffa8c00000 SizeOfImage: 0x87000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8c00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MFCORE.DLL DLLBase: 0x7fff95070000 SizeOfImage: 0x40f000 ParentDllBase: 0x7fffa8c00000 OriginalBase: 0x7fff95070000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MFPlat.dll DLLBase: 0x7fff97630000 SizeOfImage: 0x21e000 ParentDllBase: 0x0 OriginalBase: 0x7fff97630000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\RTWorkQ.DLL DLLBase: 0x7fff975e0000 SizeOfImage: 0x45000 ParentDllBase: 0x7fff97630000 OriginalBase: 0x7fff975e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+47ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\mfAACEnc.dll DLLBase: 0x7fff62900000 SizeOfImage: 0x18c000 ParentDllBase: 0x0 OriginalBase: 0x7fff62900000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MSACM32.dll DLLBase: 0x7fff628d0000 SizeOfImage: 0x21000 ParentDllBase: 0x7fffa8e30000 OriginalBase: 0x7fff628d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\winmmbase.dll DLLBase: 0x7fff62890000 SizeOfImage: 0x31000 ParentDllBase: 0x7fff628d0000 OriginalBase: 0x7fff62890000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+59ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\imaadp32.acm DLLBase: 0x7fff64650000 SizeOfImage: 0xe000 ParentDllBase: 0x0 OriginalBase: 0x7fff64650000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msadp32.acm DLLBase: 0x7fff8e980000 SizeOfImage: 0xd000 ParentDllBase: 0x0 OriginalBase: 0x7fff8e980000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+59ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msg711.acm DLLBase: 0x7fff62880000 SizeOfImage: 0xb000 ParentDllBase: 0x0 OriginalBase: 0x7fff62880000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msgsm32.acm DLLBase: 0x7fff62860000 SizeOfImage: 0xf000 ParentDllBase: 0x0 OriginalBase: 0x7fff62860000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\l3codeca.acm DLLBase: 0x7fff62840000 SizeOfImage: 0x1d000 ParentDllBase: 0x0 OriginalBase: 0x7fff62840000 ImplicitPathOptions: 0x1000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\AVRT.dll DLLBase: 0x7fffa3350000 SizeOfImage: 0xb000 ParentDllBase: 0x7fff975e0000 OriginalBase: 0x7fffa3350000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+120ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 7296: FullDllName: C:\WINDOWS\system32\ctfmon.exe DLLBase: 0x7ff61b310000 SizeOfImage: 0x11000 ParentDllBase: 0x0 OriginalBase: 0x7ff61b310000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+1ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7ff61b310000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MsCtfMonitor.DLL DLLBase: 0x7fff9ee90000 SizeOfImage: 0x19000 ParentDllBase: 0x7ff61b310000 OriginalBase: 0x7fff9ee90000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MSUTB.dll DLLBase: 0x7fff9ee30000 SizeOfImage: 0x4f000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fff9ee30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\USER32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fff9ee30000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+4ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+9ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fff9ee90000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+10ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ole32.dll DLLBase: 0x7fffabd00000 SizeOfImage: 0x1a0000 ParentDllBase: 0x0 OriginalBase: 0x7fffabd00000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+13ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+14ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CoreMessaging.dll DLLBase: 0x7fffa6730000 SizeOfImage: 0x125000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffa6730000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+15ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CoreUIComponents.dll DLLBase: 0x7fffa2dc0000 SizeOfImage: 0x2e3000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffa2dc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x7fffa2dc0000 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+16ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\InputService.dll DLLBase: 0x7fff9e930000 SizeOfImage: 0x4ee000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e930000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\TextInputMethodFormatter.dll DLLBase: 0x7fff9e710000 SizeOfImage: 0x95000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fff9e710000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff9e710000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+18ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\MTFServer.dll DLLBase: 0x7fff9cf30000 SizeOfImage: 0x51000 ParentDllBase: 0x0 OriginalBase: 0x7fff9cf30000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+21ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextInputFramework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x0 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+24ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+25ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\windowmanagementapi.dll DLLBase: 0x7fffa2b70000 SizeOfImage: 0x1b6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa2b70000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x0 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x800 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+26ms) Load Reason: 2 (LoadReasonDynamicForwarderDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\InputLocaleManager.dll DLLBase: 0x7fff9e6c0000 SizeOfImage: 0x1b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9e6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+26ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+29ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:11Z (+29ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\Bcp47Langs.dll DLLBase: 0x7fff9e650000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fff9e650000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+34ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\KBDPL1.DLL DLLBase: 0x7fffa8ff0000 SizeOfImage: 0x6000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8ff0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+34ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x822cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProcessAttachCalled FullDllName: C:\WINDOWS\SYSTEM32\inputhost.dll DLLBase: 0x7fff9e450000 SizeOfImage: 0x1e2000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fff9e450000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+35ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\wtsapi32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff9e930000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:11Z (+38ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\mtf.dll DLLBase: 0x7fff95ea0000 SizeOfImage: 0x48000 ParentDllBase: 0x0 OriginalBase: 0x7fff95ea0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:12Z (+1037ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate 5696: FullDllName: C:\Users\GT\Desktop\VSTriage.exe DLLBase: 0x7ff77a3f0000 SizeOfImage: 0x3d000 ParentDllBase: 0x0 OriginalBase: 0x7ff77a3f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2acc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20aac4 ImageDll InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2caacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+77ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2cabcc ImageDll LoadNotificationsSent InLegacyLists InIndexes ShimDll InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ADVAPI32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff77a3f0000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+117ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+117ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+117ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+117ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\WS2_32.dll DLLBase: 0x7fffabb50000 SizeOfImage: 0x74000 ParentDllBase: 0x7ff77a3f0000 OriginalBase: 0x7fffabb50000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\CRYPT32.dll DLLBase: 0x7fffaaa10000 SizeOfImage: 0x177000 ParentDllBase: 0x7ff77a3f0000 OriginalBase: 0x7fffaaa10000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaaa10000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28aaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL DLLBase: 0x7fffa81e0000 SizeOfImage: 0x33000 ParentDllBase: 0x7ff77a3f0000 OriginalBase: 0x7fffa81e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\DNSAPI.dll DLLBase: 0x7fffa8270000 SizeOfImage: 0x126000 ParentDllBase: 0x7ff77a3f0000 OriginalBase: 0x7fffa8270000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\Secur32.dll DLLBase: 0x7fffa74f0000 SizeOfImage: 0xd000 ParentDllBase: 0x7ff77a3f0000 OriginalBase: 0x7fffa74f0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\SSPICLI.DLL DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa74f0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+118ms) Load Reason: 1 (LoadReasonStaticForwarderDependency) Flags: 0x2caaec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\NSI.dll DLLBase: 0x7fffaba80000 SizeOfImage: 0xa000 ParentDllBase: 0x7fffa81e0000 OriginalBase: 0x7fffaba80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+121ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xcaacc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable ReservedFlags1 LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled 5704: FullDllName: C:\WINDOWS\system32\svchost.exe DLLBase: 0x7ff667980000 SizeOfImage: 0x13000 ParentDllBase: 0x0 OriginalBase: 0x7ff667980000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff667980000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+1ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffa87d0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+3ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+3ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+4ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+4ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\pcasvc.dll DLLBase: 0x7fff62710000 SizeOfImage: 0x12b000 ParentDllBase: 0x0 OriginalBase: 0x7fff62710000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cfgmgr32.dll DLLBase: 0x7fffaa590000 SizeOfImage: 0x57000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffaa590000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\apphelp.dll DLLBase: 0x7fffa6b10000 SizeOfImage: 0x9e000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffa6b10000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WININET.dll DLLBase: 0x7fff9e110000 SizeOfImage: 0x289000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fff9e110000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\wevtapi.dll DLLBase: 0x7fffa4620000 SizeOfImage: 0x53000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffa4620000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\drvstore.dll DLLBase: 0x7fff9c030000 SizeOfImage: 0x17c000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fff9c030000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+7ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\powrprof.dll DLLBase: 0x7fffaa890000 SizeOfImage: 0x5e000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffaa890000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\UMPDC.dll DLLBase: 0x7fffaa870000 SizeOfImage: 0x14000 ParentDllBase: 0x7fffaa890000 OriginalBase: 0x7fffaa870000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+11ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WTSAPI32.dll DLLBase: 0x7fffa6bc0000 SizeOfImage: 0x16000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffa6bc0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: c:\windows\system32\WINSTA.dll DLLBase: 0x7fffaa7c0000 SizeOfImage: 0x6a000 ParentDllBase: 0x7fffa6bc0000 OriginalBase: 0x7fffaa7c0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+12ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+16ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\taskschd.dll DLLBase: 0x7fffa41b0000 SizeOfImage: 0xa1000 ParentDllBase: 0x0 OriginalBase: 0x7fffa41b0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+17ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\SspiCli.dll DLLBase: 0x7fffa92d0000 SizeOfImage: 0x49000 ParentDllBase: 0x7fffa41b0000 OriginalBase: 0x7fffa92d0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+17ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\wosc.dll DLLBase: 0x7fff9fbb0000 SizeOfImage: 0x7b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fbb0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\Windows.Web.dll DLLBase: 0x7fff9fb10000 SizeOfImage: 0x9b000 ParentDllBase: 0x0 OriginalBase: 0x7fff9fb10000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\wintypes.dll DLLBase: 0x7fffaab90000 SizeOfImage: 0x173000 ParentDllBase: 0x0 OriginalBase: 0x7fffaab90000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+18ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\XmlLite.dll DLLBase: 0x7fffa8a20000 SizeOfImage: 0x4d000 ParentDllBase: 0x7fffa41b0000 OriginalBase: 0x7fffa8a20000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+19ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\policymanager.dll DLLBase: 0x7fffa5ff0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7fff9fbb0000 OriginalBase: 0x7fffa5ff0000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+22ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\Windows\System32\msvcp110_win.dll DLLBase: 0x7fffa5f50000 SizeOfImage: 0x91000 ParentDllBase: 0x7fffa5ff0000 OriginalBase: 0x7fffa5f50000 ImplicitPathOptions: 0x2008 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+22ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\rsaenh.dll DLLBase: 0x7fffa8730000 SizeOfImage: 0x3b000 ParentDllBase: 0x0 OriginalBase: 0x7fffa8730000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+38ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\CRYPTBASE.dll DLLBase: 0x7fffa9950000 SizeOfImage: 0xc000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffa9950000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0xca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled FullDllName: C:\WINDOWS\system32\bcrypt.dll DLLBase: 0x7fffaa900000 SizeOfImage: 0x26000 ParentDllBase: 0x7fffa8730000 OriginalBase: 0x7fffaa900000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+39ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\cryptsp.dll DLLBase: 0x7fffaa540000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fff62710000 OriginalBase: 0x7fffaa540000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+45ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate 11016: FullDllName: C:\WINDOWS\system32\conhost.exe DLLBase: 0x7ff724440000 SizeOfImage: 0x100000 ParentDllBase: 0x0 OriginalBase: 0x7ff724440000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x20a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\ntdll.dll DLLBase: 0x7fffad8e0000 SizeOfImage: 0x267000 ParentDllBase: 0x0 OriginalBase: 0x7fffad8e0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x20a2c4 ImageDll InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNEL32.DLL DLLBase: 0x7fffac260000 SizeOfImage: 0xc9000 ParentDllBase: 0x0 OriginalBase: 0x7fffac260000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\KERNELBASE.dll DLLBase: 0x7fffab120000 SizeOfImage: 0x3f0000 ParentDllBase: 0x7fffac260000 OriginalBase: 0x7fffab120000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+0ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcp_win.dll DLLBase: 0x7fffaadd0000 SizeOfImage: 0xa3000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffaadd0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\ucrtbase.dll DLLBase: 0x7fffab520000 SizeOfImage: 0x14b000 ParentDllBase: 0x7fffaadd0000 OriginalBase: 0x7fffab520000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+1ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2ec ImageDll LoadNotificationsSent ProcessStaticImport InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\advapi32.dll DLLBase: 0x7fffab9c0000 SizeOfImage: 0xb4000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffab9c0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+1ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\msvcrt.dll DLLBase: 0x7fffab670000 SizeOfImage: 0xa9000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab670000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\sechost.dll DLLBase: 0x7fffab720000 SizeOfImage: 0xa6000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffab720000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\RPCRT4.dll DLLBase: 0x7fffac030000 SizeOfImage: 0x118000 ParentDllBase: 0x7fffab9c0000 OriginalBase: 0x7fffac030000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\user32.dll DLLBase: 0x7fffac850000 SizeOfImage: 0x1c5000 ParentDllBase: 0x0 OriginalBase: 0x7fffac850000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\win32u.dll DLLBase: 0x7fffaae80000 SizeOfImage: 0x27000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffaae80000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x8a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled FullDllName: C:\WINDOWS\System32\GDI32.dll DLLBase: 0x7fffac6c0000 SizeOfImage: 0x2b000 ParentDllBase: 0x7fffac850000 OriginalBase: 0x7fffac6c0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\gdi32full.dll DLLBase: 0x7fffaaeb0000 SizeOfImage: 0x138000 ParentDllBase: 0x7fffac6c0000 OriginalBase: 0x7fffaaeb0000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+2ms) Load Reason: 0 (LoadReasonStaticDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\IMM32.DLL DLLBase: 0x7fffaba90000 SizeOfImage: 0x2f000 ParentDllBase: 0x0 OriginalBase: 0x7fffaba90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+3ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\combase.dll DLLBase: 0x7fffac330000 SizeOfImage: 0x385000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffac330000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\kernel.appcore.dll DLLBase: 0x7fffa87d0000 SizeOfImage: 0x1b000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffa87d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\bcryptPrimitives.dll DLLBase: 0x7fffab080000 SizeOfImage: 0x99000 ParentDllBase: 0x7fffac030000 OriginalBase: 0x7fffab080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+5ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\clbcatq.dll DLLBase: 0x7fffad7d0000 SizeOfImage: 0xa8000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fffad7d0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll DLLBase: 0x7fff9cfc0000 SizeOfImage: 0x1a000 ParentDllBase: 0x7fffac330000 OriginalBase: 0x7fff9cfc0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+6ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\system32\uxtheme.dll DLLBase: 0x7fffa6ce0000 SizeOfImage: 0xaf000 ParentDllBase: 0x0 OriginalBase: 0x7fffa6ce0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+12ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\MSCTF.dll DLLBase: 0x7fffaca20000 SizeOfImage: 0x161000 ParentDllBase: 0x7fffaba90000 OriginalBase: 0x7fffaca20000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+54ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\shcore.dll DLLBase: 0x7fffabc00000 SizeOfImage: 0xf5000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffabc00000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+55ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\TextShaping.dll DLLBase: 0x7fff9a880000 SizeOfImage: 0xb3000 ParentDllBase: 0x7fffaaeb0000 OriginalBase: 0x7fff9a880000 ImplicitPathOptions: 0x4000 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+60ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c\comctl32.DLL DLLBase: 0x7fff91bf0000 SizeOfImage: 0x29a000 ParentDllBase: 0x0 OriginalBase: 0x7fff91bf0000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+63ms) Load Reason: 4 (LoadReasonDynamicLoad) Flags: 0x1028a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate Redirected FullDllName: C:\WINDOWS\SYSTEM32\dwmapi.dll DLLBase: 0x7fffa7080000 SizeOfImage: 0x35000 ParentDllBase: 0x7ff724440000 OriginalBase: 0x7fffa7080000 ImplicitPathOptions: 0x0 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+64ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x2ca2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad DontCallForThreads ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\System32\OLEAUT32.dll DLLBase: 0x7fffac6f0000 SizeOfImage: 0xe0000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fffac6f0000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x800 LoadTime: 2025-12-02T11:35:13Z (+65ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate FullDllName: C:\WINDOWS\SYSTEM32\textinputframework.dll DLLBase: 0x7fff9cd90000 SizeOfImage: 0x151000 ParentDllBase: 0x7fffaca20000 OriginalBase: 0x7fff9cd90000 ImplicitPathOptions: 0x8 DependentLoadFlags: 0x0 LoadTime: 2025-12-02T11:35:13Z (+66ms) Load Reason: 3 (LoadReasonDelayloadDependency) Flags: 0x28a2cc ImageDll LoadNotificationsSent InLegacyLists InIndexes InExceptionTable LoadConfigProcessed ProtectDelayLoad ProcessAttachCalled CorDeferredValidate ====Drivers==== 2025-12-02T11:35:14Z \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kdcom.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\system32\symcryptk.dll \SystemRoot\System32\drivers\cng.sys \SystemRoot\System32\drivers\CLFS.SYS \SystemRoot\System32\drivers\tm.sys \SystemRoot\System32\drivers\winaccel.sys \SystemRoot\system32\PSHED.dll \SystemRoot\system32\BOOTVID.dll \SystemRoot\System32\drivers\FLTMGR.SYS \SystemRoot\System32\drivers\msrpc.sys \SystemRoot\System32\drivers\ksecdd.sys \SystemRoot\System32\drivers\clipsp.sys \SystemRoot\System32\drivers\cmimcext.sys \SystemRoot\System32\drivers\werkernel.sys \SystemRoot\System32\drivers\ntosext.sys \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\drivers\WMILIB.SYS \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\win32k.sys \SystemRoot\system32\CI.dll \SystemRoot\System32\drivers\globmerger.sys \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WppRecorder.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016\PRM.sys \SystemRoot\System32\Drivers\acpiex.sys \SystemRoot\system32\drivers\msseccore.sys \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\System32\drivers\msisadrv.sys \SystemRoot\System32\drivers\pci.sys \SystemRoot\System32\drivers\tpm.sys \SystemRoot\System32\drivers\amdwps.sys \SystemRoot\system32\drivers\WindowsTrustedRT.sys \SystemRoot\System32\drivers\intelpep.sys \SystemRoot\System32\drivers\WindowsTrustedRTProxy.sys \SystemRoot\System32\drivers\IntelPMT.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\drivers\vdrvroot.sys \SystemRoot\system32\drivers\pdc.sys \SystemRoot\system32\drivers\CEA.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\System32\drivers\spaceport.sys \SystemRoot\System32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\System32\drivers\vmbus.sys \SystemRoot\System32\drivers\vmbkmcl.sys \SystemRoot\System32\drivers\winhv.sys \SystemRoot\System32\drivers\NDIS.SYS \SystemRoot\System32\drivers\NETIO.SYS \SystemRoot\System32\drivers\hvsocket.sys \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\System32\drivers\EhStorClass.sys \SystemRoot\System32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Wof.sys \SystemRoot\system32\drivers\wd\WdFilter.sys \SystemRoot\System32\Drivers\Ntfs.sys \SystemRoot\System32\drivers\storvsc.sys \SystemRoot\System32\drivers\storport.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\Drivers\Kerb3961Kernel.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\System32\drivers\wfplwfs.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\System32\drivers\volume.sys \SystemRoot\System32\drivers\volsnap.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\drivers\nvmedisk.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\system32\drivers\iorate.sys \SystemRoot\System32\drivers\disk.sys \SystemRoot\System32\drivers\CLASSPNP.SYS \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\drivers\cdrom.sys \SystemRoot\system32\drivers\filecrypt.sys \SystemRoot\system32\drivers\tbs.sys \SystemRoot\system32\drivers\UCPD.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\DriverStore\FileRepository\uiomap.inf_amd64_2f71bdab19510aef\uiomap.sys \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_4a022393fa7795f1\BasicRender.sys \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\System32\Drivers\CimFS.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\drivers\afunix.sys \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\drivers\vwififlt.sys \SystemRoot\System32\drivers\pacer.sys \SystemRoot\System32\drivers\ndiscap.sys \SystemRoot\system32\drivers\netbios.sys \SystemRoot\System32\drivers\Vid.sys \SystemRoot\System32\drivers\winhvr.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\System32\drivers\npsvctrig.sys \SystemRoot\System32\drivers\mssmbios.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\drivers\bam.sys \SystemRoot\system32\DRIVERS\ahcache.sys \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\CompositeBus.sys \SystemRoot\System32\drivers\kdnic.sys \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys \SystemRoot\System32\drivers\dmvsc.sys \SystemRoot\System32\drivers\VMBusHID.sys \SystemRoot\System32\drivers\HIDCLASS.SYS \SystemRoot\System32\drivers\HIDPARSE.SYS \SystemRoot\System32\drivers\hyperkbd.sys \SystemRoot\System32\drivers\kbdclass.sys \SystemRoot\System32\drivers\HyperVideo.sys \SystemRoot\System32\drivers\netvsc.sys \SystemRoot\System32\drivers\serial.sys \SystemRoot\System32\drivers\serenum.sys \SystemRoot\System32\drivers\vmgencounter.sys \SystemRoot\System32\drivers\intelppm.sys \SystemRoot\System32\drivers\NdisVirtualBus.sys \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_8b9dd76f362e3ec6\swenum.sys \SystemRoot\System32\drivers\ks.sys \SystemRoot\System32\drivers\rdpbus.sys \SystemRoot\System32\drivers\mouhid.sys \SystemRoot\System32\drivers\mouclass.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\system32\DRIVERS\udfs.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\Drivers\dump_diskdump.sys \SystemRoot\System32\drivers\dump_storvsc.sys \SystemRoot\System32\drivers\dump_vmbkmcl.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\System32\win32kfull.sys \SystemRoot\System32\win32kbase_rs.sys \SystemRoot\System32\drivers\dxgmms2.sys \SystemRoot\System32\cdd.dll \SystemRoot\system32\drivers\appid.sys \SystemRoot\System32\drivers\rdpdr.sys \SystemRoot\system32\drivers\applockerfltr.sys \SystemRoot\System32\drivers\vmgid.sys \SystemRoot\system32\drivers\bfs.sys \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\wcifs.sys \SystemRoot\System32\drivers\tsusbhub.sys \SystemRoot\system32\drivers\cldflt.sys \SystemRoot\system32\drivers\UnionFS.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\drivers\storqosflt.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\system32\drivers\bindflt.sys \SystemRoot\system32\drivers\lltdio.sys \SystemRoot\system32\drivers\mslldp.sys \SystemRoot\system32\drivers\rspndr.sys \SystemRoot\System32\DRIVERS\wanarp.sys \SystemRoot\system32\drivers\mmcss.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\system32\drivers\Ndu.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\System32\drivers\wtd.sys \SystemRoot\System32\drivers\condrv.sys \SystemRoot\System32\drivers\monitor.sys \SystemRoot\System32\drivers\terminpt.sys \SystemRoot\System32\drivers\WUDFRd.sys \SystemRoot\System32\drivers\IndirectKmd.sys \SystemRoot\system32\drivers\wd\KslD.sys \SystemRoot\system32\drivers\wd\WdNisDrv.sys ====Environment Variables==== 2025-12-02T11:35:14Z -1: GetCurrentProcess().GetEnvironmentStringsW() ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\GT\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=DESKTOP-ORDL0UQ ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData HOMEDRIVE=C: HOMEPATH=\Users\GT LOCALAPPDATA=C:\Users\GT\AppData\Local LOGONSERVER=\\DESKTOP-ORDL0UQ NUMBER_OF_PROCESSORS=8 OneDrive=C:\Users\GT\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\GT\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 170 Stepping 4, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=aa04 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\GT\AppData\Local\Temp TMP=C:\Users\GT\AppData\Local\Temp USERDOMAIN=DESKTOP-ORDL0UQ USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ USERNAME=GT USERPROFILE=C:\Users\GT windir=C:\WINDOWS __COMPAT_LAYER=Installer 0: (ERROR: 87, OpenProcess) (Cannot get environment) 4: (ERROR: 5, OpenProcess) (Cannot get environment) 172: (ERROR: 5, OpenProcess) (Cannot get environment) 716: (ERROR: 5, OpenProcess) (Cannot get environment) 892: (ERROR: 5, OpenProcess) (Cannot get environment) 964: (ERROR: 5, OpenProcess) (Cannot get environment) 972: (ERROR: 5, OpenProcess) (Cannot get environment) 804: C:\WINDOWS\system32\winlogon.exe ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERNAME=SYSTEM ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOCALAPPDATA=C:\Users\GT\AppData\Local - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 860: (ERROR: 5, OpenProcess) (Cannot get environment) 1052: (ERROR: 5, OpenProcess) (Cannot get environment) 1192: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1224: C:\WINDOWS\system32\fontdrvhost.exe ~ LOCALAPPDATA=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp ~ TMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp ~ USERDOMAIN=Font Driver Host ~ USERNAME=UMFD-0 ~ USERPROFILE=C:\Users\Default - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1232: C:\WINDOWS\system32\fontdrvhost.exe ~ LOCALAPPDATA=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp ~ TMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp ~ USERDOMAIN=Font Driver Host ~ USERNAME=UMFD-1 ~ USERPROFILE=C:\Users\Default - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1328: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1372: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1464: C:\WINDOWS\system32\LogonUI.exe ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERNAME=SYSTEM ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOCALAPPDATA=C:\Users\GT\AppData\Local - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1472: C:\WINDOWS\system32\dwm.exe ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERNAME=SYSTEM ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOCALAPPDATA=C:\Users\GT\AppData\Local - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1540: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1556: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1564: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1576: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1600: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1808: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1840: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1852: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1940: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2000: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2008: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2016: (ERROR: 5, OpenProcess) (Cannot get environment) 1368: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1716: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2080: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2088: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2096: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2132: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2156: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2228: (ERROR: 5, OpenProcess) (Cannot get environment) 2240: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2248: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2316: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2444: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2480: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2572: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2676: C:\WINDOWS\system32\vssvc.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2764: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2776: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2784: (ERROR: 5, OpenProcess) (Cannot get environment) 2844: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2856: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2864: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2184: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2204: (ERROR: 5, OpenProcess) (Cannot get environment) 2588: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\NetworkService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\NETWOR~1\AppData\Local\Temp ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\NetworkService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3076: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3172: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3180: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3436: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3540: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3636: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3644: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3780: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3828: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3856: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4012: C:\WINDOWS\System32\spoolsv.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4068: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3304: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3532: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming + DiagTrackFeedbackArchive=C:\ProgramData\Microsoft\Diagnosis\FeedbackArchive + DiagtrackRegistryRoot=SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack + DiagtrackStorageRoot=C:\ProgramData\Microsoft\Diagnosis + DiagTrackSystemPartition=Volume{cb0b64a9-a696-404a-af09-6d9556fea29a} ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3516: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3120: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3588: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3740: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3804: (ERROR: 5, OpenProcess) (Cannot get environment) 1008: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4004: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 2852: (ERROR: 5, OpenProcess) (Cannot get environment) 4224: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4632: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4744: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4880: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4888: (ERROR: 5, OpenProcess) (Cannot get environment) 5068: C:\WINDOWS\System32\AggregatorHost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming + DiagTrackFeedbackArchive=C:\ProgramData\Microsoft\Diagnosis\FeedbackArchive + DiagtrackRegistryRoot=SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack + DiagtrackStorageRoot=C:\ProgramData\Microsoft\Diagnosis + DiagTrackSystemPartition=Volume{cb0b64a9-a696-404a-af09-6d9556fea29a} ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 764: (ERROR: 5, OpenProcess) (Cannot get environment) 1176: C:\WINDOWS\system32\winlogon.exe ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERNAME=SYSTEM ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOCALAPPDATA=C:\Users\GT\AppData\Local - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5340: C:\WINDOWS\system32\fontdrvhost.exe ~ LOCALAPPDATA=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp ~ TMP=%TEMP%\Packages\microsoft.windows.fontdrvhost\AC\Temp ~ USERDOMAIN=Font Driver Host ~ USERNAME=UMFD-2 ~ USERPROFILE=C:\Users\Default - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5348: C:\Windows\System32\WUDFHost.exe + ACTIVE_DEVICES=SWD\REMOTEDISPLAYENUM\RDPIDD_INDIRECTDISPLAY&SESSIONID_0002; ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERNAME=SYSTEM ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOCALAPPDATA=C:\Users\GT\AppData\Local - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5384: C:\WINDOWS\system32\dwm.exe ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERNAME=SYSTEM ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - APPDATA=C:\Users\GT\AppData\Roaming - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOCALAPPDATA=C:\Users\GT\AppData\Local - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5744: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5936: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5480: C:\WINDOWS\system32\wbem\wmiprvse.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5368: C:\WINDOWS\system32\DllHost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5456: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3512: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 4928: C:\WINDOWS\System32\rdpclip.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 2792: C:\WINDOWS\system32\sihost.exe + EFC_2792_2283032206=1 ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 6220: C:\WINDOWS\system32\svchost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 6276: C:\WINDOWS\system32\svchost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 6332: C:\WINDOWS\system32\svchost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 6392: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 6404: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 6412: C:\WINDOWS\system32\taskhostw.exe + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 6688: (ERROR: 5, OpenProcess) (Cannot get environment) 6752: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 6796: C:\WINDOWS\Explorer.EXE + =::=::\ + CLIENTNAME=NUC + EFC_6796_1262719628=1 + EFC_6796_1592913036=1 + EFC_6796_2283032206=1 + EFC_6796_2775293581=1 + EFC_6796_3789132940=1 + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\GT\AppData\Local\Microsoft\WindowsApps; + SESSIONNAME=31C5CE94259D4006A9E4#0 - __COMPAT_LAYER=Installer 6860: C:\Windows\System32\ShellHost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 7096: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 7116: C:\WINDOWS\system32\SppExtComObj.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 6156: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe - __COMPAT_LAYER=Installer 6968: C:\WINDOWS\system32\svchost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 7236: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 7536: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp + WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --enable-features=msEdgeFluentOverlayScrollbar + WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 - __COMPAT_LAYER=Installer 7544: C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\Temp - __COMPAT_LAYER=Installer 7640: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 7740: C:\Windows\System32\RuntimeBroker.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 7764: C:\WINDOWS\system32\svchost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 7840: C:\Windows\System32\RuntimeBroker.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 6956: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 7916: C:\WINDOWS\system32\backgroundTaskHost.exe ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\microsoftwindows.crossdevice_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\microsoftwindows.crossdevice_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\microsoftwindows.crossdevice_cw5n1h2txyewy\AC\Temp - __COMPAT_LAYER=Installer 8160: C:\WINDOWS\system32\backgroundTaskHost.exe ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\microsoft.yourphone_8wekyb3d8bbwe\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\microsoft.yourphone_8wekyb3d8bbwe\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\microsoft.yourphone_8wekyb3d8bbwe\AC\Temp - __COMPAT_LAYER=Installer 8224: (ERROR: 5, OpenProcess) (Cannot get environment) 8532: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + COMPONENT_INSTALLER_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_METRICS_CLIENT_ID_HASH=585698538318726390 + EDGE_METRICS_SESSION_ID=5 + EDGE_RUNTIME_VARIATIONS_SEED_ETAG="r0ZLHeOGPMalUH3U4XNTW55J68NxZ3DAXQ2EnqGF8d0=" + EDGE_USER_DATA_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_UX_CONFIG_CORRELATION_ID= + EDGE_VARIATIONS_SEED_ETAG= + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp + WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --enable-features=msEdgeFluentOverlayScrollbar + WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 - __COMPAT_LAYER=Installer 8564: C:\WINDOWS\system32\ctfmon.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 8608: C:\WINDOWS\system32\taskhostw.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 8756: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp + WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --enable-features=msEdgeFluentOverlayScrollbar + WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 - __COMPAT_LAYER=Installer 8880: C:\WINDOWS\system32\DllHost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 8904: C:\Windows\System32\RuntimeBroker.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 8992: C:\Windows\System32\RuntimeBroker.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 9084: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + COMPONENT_INSTALLER_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_METRICS_CLIENT_ID_HASH=5835970181910402727 + EDGE_METRICS_SESSION_ID=4 + EDGE_RUNTIME_VARIATIONS_SEED_ETAG="r0ZLHeOGPMalUH3U4XNTW55J68NxZ3DAXQ2EnqGF8d0=" + EDGE_USER_DATA_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_UX_CONFIG_CORRELATION_ID= + EDGE_VARIATIONS_SEED_ETAG= + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp + WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --enable-features=msEdgeFluentOverlayScrollbar + WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 - __COMPAT_LAYER=Installer 9120: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + COMPONENT_INSTALLER_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_METRICS_CLIENT_ID_HASH=585698538318726390 + EDGE_METRICS_SESSION_ID=5 + EDGE_RUNTIME_VARIATIONS_SEED_ETAG="r0ZLHeOGPMalUH3U4XNTW55J68NxZ3DAXQ2EnqGF8d0=" + EDGE_USER_DATA_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_UX_CONFIG_CORRELATION_ID= + EDGE_VARIATIONS_SEED_ETAG= + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp + WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26100.4946) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26100 IsWebView2/True (WebView2Version 141.0.3537.99)" --enable-features=msEdgeFluentOverlayScrollbar + WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 - __COMPAT_LAYER=Installer 6020: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + COMPONENT_INSTALLER_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp - ALLUSERSPROFILE=C:\ProgramData - APPDATA=C:\Users\GT\AppData\Roaming - CommonProgramFiles=C:\Program Files\Common Files - CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files - CommonProgramW6432=C:\Program Files\Common Files - COMPUTERNAME=DESKTOP-ORDL0UQ - ComSpec=C:\WINDOWS\system32\cmd.exe - DriverData=C:\Windows\System32\Drivers\DriverData - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - NUMBER_OF_PROCESSORS=8 - OneDrive=C:\Users\GT\OneDrive - OS=Windows_NT - PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC - PROCESSOR_ARCHITECTURE=AMD64 - PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 170 Stepping 4, GenuineIntel - PROCESSOR_LEVEL=6 - PROCESSOR_REVISION=aa04 - ProgramData=C:\ProgramData - ProgramFiles=C:\Program Files - ProgramFiles(x86)=C:\Program Files (x86) - ProgramW6432=C:\Program Files - PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - PUBLIC=C:\Users\Public - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - USERNAME=GT - USERPROFILE=C:\Users\GT - windir=C:\WINDOWS - __COMPAT_LAYER=Installer 5644: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + COMPONENT_INSTALLER_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp - ALLUSERSPROFILE=C:\ProgramData - APPDATA=C:\Users\GT\AppData\Roaming - CommonProgramFiles=C:\Program Files\Common Files - CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files - CommonProgramW6432=C:\Program Files\Common Files - COMPUTERNAME=DESKTOP-ORDL0UQ - ComSpec=C:\WINDOWS\system32\cmd.exe - DriverData=C:\Windows\System32\Drivers\DriverData - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - NUMBER_OF_PROCESSORS=8 - OneDrive=C:\Users\GT\OneDrive - OS=Windows_NT - PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC - PROCESSOR_ARCHITECTURE=AMD64 - PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 170 Stepping 4, GenuineIntel - PROCESSOR_LEVEL=6 - PROCESSOR_REVISION=aa04 - ProgramData=C:\ProgramData - ProgramFiles=C:\Program Files - ProgramFiles(x86)=C:\Program Files (x86) - ProgramW6432=C:\Program Files - PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - PUBLIC=C:\Users\Public - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - USERNAME=GT - USERPROFILE=C:\Users\GT - windir=C:\WINDOWS - __COMPAT_LAYER=Installer 9520: (ERROR: 5, OpenProcess) (Cannot get environment) 9564: C:\Windows\System32\smartscreen.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 9608: C:\Windows\System32\SecurityHealthSystray.exe + =::=::\ + CLIENTNAME=NUC + EFC_6796_1262719628=1 + EFC_6796_1592913036=1 + EFC_6796_2283032206=1 + EFC_6796_2775293581=1 + EFC_6796_3789132940=1 + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\GT\AppData\Local\Microsoft\WindowsApps; + SESSIONNAME=31C5CE94259D4006A9E4#0 - __COMPAT_LAYER=Installer 9632: (ERROR: 5, OpenProcess) (Cannot get environment) 9876: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe + COMPONENT_INSTALLER_DIR=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView + EDGE_BROWSER_PID=8532 + EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8532_XOATTEEUJSCVZWMD + EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:20e5544737bbdfd93b544010710070b2d798a31a + IS_EDGE_WEBVIEW=1 ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC ~ TEMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp - ALLUSERSPROFILE=C:\ProgramData - APPDATA=C:\Users\GT\AppData\Roaming - CommonProgramFiles=C:\Program Files\Common Files - CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files - CommonProgramW6432=C:\Program Files\Common Files - COMPUTERNAME=DESKTOP-ORDL0UQ - ComSpec=C:\WINDOWS\system32\cmd.exe - DriverData=C:\Windows\System32\Drivers\DriverData - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - NUMBER_OF_PROCESSORS=8 - OneDrive=C:\Users\GT\OneDrive - OS=Windows_NT - PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC - PROCESSOR_ARCHITECTURE=AMD64 - PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 170 Stepping 4, GenuineIntel - PROCESSOR_LEVEL=6 - PROCESSOR_REVISION=aa04 - ProgramData=C:\ProgramData - ProgramFiles=C:\Program Files - ProgramFiles(x86)=C:\Program Files (x86) - ProgramW6432=C:\Program Files - PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - PUBLIC=C:\Users\Public - USERDOMAIN=DESKTOP-ORDL0UQ - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - USERNAME=GT - USERPROFILE=C:\Users\GT - windir=C:\WINDOWS - __COMPAT_LAYER=Installer 10060: C:\WINDOWS\system32\wbem\wmiprvse.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 10440: C:\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe + =::=::\ + CLIENTNAME=NUC + EFC_6796_1262719628=1 + EFC_6796_1592913036=1 + EFC_6796_2283032206=1 + EFC_6796_2775293581=1 + EFC_6796_3789132940=1 + FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer + FPS_BROWSER_USER_PROFILE_STRING=Default ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\GT\AppData\Local\Microsoft\WindowsApps; + QSG_RENDER_LOOP=basic + QT_ACCESSIBLE_SORT_TREE_CHILDREN=1 + QT_ACCESSIBLE_TREEVIEW=1 + QT_QUICK_BACKEND=softwarecontext + QT_SCALE_FACTOR=1 + SESSIONNAME=31C5CE94259D4006A9E4#0 ~ __COMPAT_LAYER=PerProcessSystemDPIForceOff 10720: C:\WINDOWS\System32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 10768: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 10812: C:\WINDOWS\system32\SearchIndexer.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\WINDOWS\system32 ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc ~ TMP=C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 3316: C:\WINDOWS\system32\DllHost.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 9288: C:\WINDOWS\System32\SearchProtocolHost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\WINDOWS\system32 ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc ~ TMP=C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 10172: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 9268: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1316: C:\WINDOWS\system32\conhost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 1044: C:\WINDOWS\system32\conhost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps; ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 9224: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe ~ LOCALAPPDATA=C:\Users\GT\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\AC ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\Users\GT\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\AC\Temp ~ TMP=C:\Users\GT\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\AC\Temp - __COMPAT_LAYER=Installer 10232: C:\Windows\System32\RuntimeBroker.exe ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules - __COMPAT_LAYER=Installer 10344: C:\WINDOWS\system32\AUDIODG.EXE ~ APPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp ~ USERDOMAIN=NT AUTHORITY ~ USERNAME=LOCAL SERVICE ~ USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 7296: C:\WINDOWS\system32\ctfmon.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 5696: C:\Users\GT\Desktop\VSTriage.exe (no differences) 5704: C:\WINDOWS\system32\svchost.exe ~ APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming ~ LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local ~ Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps ~ PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules ~ TEMP=C:\WINDOWS\TEMP ~ TMP=C:\WINDOWS\TEMP ~ USERDOMAIN=WORKGROUP ~ USERNAME=DESKTOP-ORDL0UQ$ ~ USERPROFILE=C:\WINDOWS\system32\config\systemprofile - HOMEDRIVE=C: - HOMEPATH=\Users\GT - LOGONSERVER=\\DESKTOP-ORDL0UQ - OneDrive=C:\Users\GT\OneDrive - USERDOMAIN_ROAMINGPROFILE=DESKTOP-ORDL0UQ - __COMPAT_LAYER=Installer 11016: C:\WINDOWS\system32\conhost.exe - __COMPAT_LAYER=Installer ====Root Certs==== 2025-12-02T11:35:14Z Machine Root 001: cdd4eeae6000ac7f40c3802c171e30148030c072 Microsoft Root Certificate Authority 002: be36a4562fb2ee05dbb3d32323adf445084ed656 Thawte Timestamping CA 003: a43489159a520f0d93d032ccaf37e7fe20a8b419 Microsoft Root Authority 004: 92b46c76e13054e104f230517e6e504d43ab10b5 Symantec Enterprise Mobile Root for Microsoft 005: 8f43288ad272f3103b6fb1428485ea3014c0bcfe Microsoft Root Certificate Authority 2011 006: 7f88cd7223f3c813818c994614a89c99fa3b5247 Microsoft Authenticode(tm) Root Authority 007: 3b1efd3a66ea28b16697394703a72ca340a05bd5 Microsoft Root Certificate Authority 2010 008: 31f9fc8ba3805986b721ea7295c65b3a44534274 Microsoft ECC TS Root Certificate Authority 2018 009: 245c97df7514e7cf2df8be72ae957b9e04741e85 Copyright (c) 1997 Microsoft Corp. 010: 18f7c1fcc3090203fd5baa2f861a754976c8dd25 NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. 011: 06f1aa330b927b753a40e68cdf22e34bcbef3352 Microsoft ECC Product Root Certificate Authority 2018 012: 0119e81be9a14cd8e22f40ac118c687ecba3f4d8 Microsoft Time Stamp Root Certificate Authority 2014 013: df3c24f9bfd666761b268073fe06d1cc8d4f82a4 DigiCert Global Root G2 014: a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c5436 DigiCert Global Root CA 015: 7e04de896a3e666d00e687d33ffad93be83d349e DigiCert Global Root G3 016: 742c3192e607e424eb4549542be1bbc53e6174e2 Class 3 Public Primary Certification Authority 017: 73a5e64a3bff8316ff0edccc618a906e4eae4d74 Microsoft RSA Root Certificate Authority 2017 018: 07e032e020b72c3f192f0628a2593a19a70f069e Certum Trusted Network CA 019: 0563b8630d62d75abbc8ab1e4bdfb5a899b24d43 DigiCert Assured ID Root CA Current User Root 001: cdd4eeae6000ac7f40c3802c171e30148030c072 Microsoft Root Certificate Authority 002: be36a4562fb2ee05dbb3d32323adf445084ed656 Thawte Timestamping CA 003: a43489159a520f0d93d032ccaf37e7fe20a8b419 Microsoft Root Authority 004: 92b46c76e13054e104f230517e6e504d43ab10b5 Symantec Enterprise Mobile Root for Microsoft 005: 8f43288ad272f3103b6fb1428485ea3014c0bcfe Microsoft Root Certificate Authority 2011 006: 7f88cd7223f3c813818c994614a89c99fa3b5247 Microsoft Authenticode(tm) Root Authority 007: 3b1efd3a66ea28b16697394703a72ca340a05bd5 Microsoft Root Certificate Authority 2010 008: 31f9fc8ba3805986b721ea7295c65b3a44534274 Microsoft ECC TS Root Certificate Authority 2018 009: 245c97df7514e7cf2df8be72ae957b9e04741e85 Copyright (c) 1997 Microsoft Corp. 010: 18f7c1fcc3090203fd5baa2f861a754976c8dd25 NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. 011: 06f1aa330b927b753a40e68cdf22e34bcbef3352 Microsoft ECC Product Root Certificate Authority 2018 012: 0119e81be9a14cd8e22f40ac118c687ecba3f4d8 Microsoft Time Stamp Root Certificate Authority 2014 013: df3c24f9bfd666761b268073fe06d1cc8d4f82a4 DigiCert Global Root G2 014: a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c5436 DigiCert Global Root CA 015: 7e04de896a3e666d00e687d33ffad93be83d349e DigiCert Global Root G3 016: 742c3192e607e424eb4549542be1bbc53e6174e2 Class 3 Public Primary Certification Authority 017: 73a5e64a3bff8316ff0edccc618a906e4eae4d74 Microsoft RSA Root Certificate Authority 2017 018: 07e032e020b72c3f192f0628a2593a19a70f069e Certum Trusted Network CA 019: 0563b8630d62d75abbc8ab1e4bdfb5a899b24d43 DigiCert Assured ID Root CA ====Open Handles==== 2025-12-02T11:35:14Z 4: (ERROR: 5) 716: (ERROR: 5) 892: (ERROR: 5) 964: (ERROR: 5) 972: (ERROR: 5) 804: C:\Windows\System32\winlogon.exe \BaseNamedObjects\BootShellComplete \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\WinlogonLogoff \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winlogon.exe.mui \Device\KsecDD \Disconnect \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\GPClient \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\Profiles \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\Sens \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\SessionEnv \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\TermSrv \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \RPC Control\WMsgKRpc06C161 \Sessions\1\BaseNamedObjects \Sessions\1\BaseNamedObjects\SM0:804:120:WilError_03 \Sessions\1\BaseNamedObjects\SM0:804:120:WilError_03_p0 \Sessions\1\BaseNamedObjects\SM0:804:120:WilError_03_p0h \Sessions\1\BaseNamedObjects\SM0:804:304:WilStaging_02 \Sessions\1\BaseNamedObjects\SM0:804:304:WilStaging_02_p0 \Sessions\1\BaseNamedObjects\SM0:804:304:WilStaging_02_p0h \Sessions\1\BaseNamedObjects\ThemesStartEvent \Sessions\1\Windows\Theme1660852187 \Sessions\1\Windows\ThemeSection \Sessions\1\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 \Winlogon 860: (ERROR: 5) 1052: (ERROR: 5) 1192: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\RotHintTable \BaseNamedObjects\SC_AutoStartPhase1Done \BaseNamedObjects\SM0:1192:120:WilError_03 \BaseNamedObjects\SM0:1192:120:WilError_03_p0 \BaseNamedObjects\SM0:1192:120:WilError_03_p0h \BaseNamedObjects\SM0:1192:304:WilStaging_02 \BaseNamedObjects\SM0:1192:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1192:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\windows_shell_global_counters \Container_Microsoft.WindowsNotepad_11.2507.26.0_x64__8wekyb3d8bbwe-S-1-5-21-940397446-1893263122-1169132827-1001 \Container_MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy-S-1-5-21-940397446-1893263122-1169132827-1001 \Default \Device\CNG \Device\DeviceApi \Device\Harddisk0\DR0 \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \Device\NduIoDevice \Device\Nsi \Device\PcwDrv \KernelObjects\HighCommitCondition \KernelObjects\MaximumCommitCondition \KernelObjects\MemoryPartition0 \KnownDlls \REGISTRY\A\{3e006793-24ac-48b2-98bb-1e92bee2d4de} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\COM3 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BackgroundModel\Policy \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\PowerSettings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\PowerSettings\7516b95f-f776-4464-8c53-06167f40cc99 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\PowerSettings\7516b95f-f776-4464-8c53-06167f40cc99\aded5e82-b909-4619-9949-f5d71dac0bcb \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\PowerSettings\de830923-a562-41af-a086-e3a2c6bad2da \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\PowerSettings\de830923-a562-41af-a086-e3a2c6bad2da\e69653ca-cf7f-4f05-aa73-cb833fa90ad4 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Profile\Events\{54533251-82be-4824-96c1-47b60b740d00} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\SecurityDescriptors \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\Sync\Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Power\User\PowerSchemes \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\.DEFAULT\System\GameConfigStore \REGISTRY\USER\.DEFAULT\System\GameConfigStore\Children \REGISTRY\USER\.DEFAULT\System\GameConfigStore\Parents \REGISTRY\USER\S-1-5-19\System\GameConfigStore \REGISTRY\USER\S-1-5-19\System\GameConfigStore\Children \REGISTRY\USER\S-1-5-19\System\GameConfigStore\Parents \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\System\GameConfigStore \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\System\GameConfigStore\Children \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\System\GameConfigStore\Parents \RPC Control\actkernel \RPC Control\csebpub \RPC Control\dabrpc \RPC Control\LRPC-665e432a47b6e97400 \RPC Control\LRPC-b24d394655cbcd23d1 \RPC Control\LRPC-dc66631f9cf2e0686b \RPC Control\LRPC-f1d60da68faee94dcd \RPC Control\LRPC-f5567c8e1249eaa45a \RPC Control\OLE9005D58B30DBE598EE3F5FDF0530 \RPC Control\umpo \Windows\WindowStations\Service-0x0-3e7$ 1224: C:\Windows\System32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32 \KnownDlls \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523 \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:1224:304:WilStaging_02 \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:1224:304:WilStaging_02_p0 \Sessions\0\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:1224:304:WilStaging_02_p0h 1232: C:\Windows\System32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32 \KnownDlls \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523 \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:1232:304:WilStaging_02 \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:1232:304:WilStaging_02_p0 \Sessions\1\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:1232:304:WilStaging_02_p0h 1328: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\BFE_Notify_Event_{424aa9c9-eb30-4639-a419-30ede0dc47bd} \BaseNamedObjects\RotHintTable \BaseNamedObjects\SC_AutoStartComplete \BaseNamedObjects\ScmCreatedEvent \BaseNamedObjects\SM0:1328:120:WilError_03 \BaseNamedObjects\SM0:1328:120:WilError_03_p0 \BaseNamedObjects\SM0:1328:120:WilError_03_p0h \BaseNamedObjects\SM0:1328:304:WilStaging_02 \BaseNamedObjects\SM0:1328:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1328:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Device\Afd \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\mswsock.dll.mui \Device\KsecDD \Device\NamedPipe\epmapper \Device\NamedPipe\Winsock2\CatalogChangeListener-530-0 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-20\Control Panel\International \RPC Control\epmapper 1372: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\RCMReadyEvent \BaseNamedObjects\SM0:1372:304:WilStaging_02 \BaseNamedObjects\SM0:1372:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1372:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\NamedPipe\lsass \Device\NamedPipe\LSM_API_service \Device\NamedPipe\Winsock2\CatalogChangeListener-55c-0 \Device\PcwDrv \KernelObjects\MaximumCommitCondition \KernelObjects\Session0 \KernelObjects\Session1 \KernelObjects\Session2 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Terminal Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\ClusterSettings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\WinStations \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\MACHINE\SYSTEM\Setup \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-409f5d1e94d7cced8c \RPC Control\LSMApi \RPC Control\OLECC15D28326F247E27B87CD8FB47F \Sessions\1\Windows\DwmCatastrophicShutdown \Sessions\2\Windows\DwmCatastrophicShutdown \SmSsWinStationApiPort \Windows\WindowStations\Service-0x0-3e7$ 1464: C:\Windows\System32\LogonUI.exe \BaseNamedObjects\[CoreUI]-PID(1464)-TID(4696) 4247af78-2ab5-4cb5-8730-43a28e0de026 \BaseNamedObjects\[CoreUI]-PID(1464)-TID(4848) f4d3343e-f347-47db-bd39-c17c3ab8455f \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\SegoeIcons.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\credprovs.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\netmsg.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\NetworkIcon.dll.mui \Device\HarddiskVolume3\Windows\System32\LogFiles\WMI\FaceUnlockManually.etl \Device\HarddiskVolume3\Windows\SystemResources\imageres.dll.mun \Device\KsecDD \Device\NamedPipe\wkssvc \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\RASPLAP \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon\S-1-1-0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\S-1-5-21-940397446-1893263122-1169132827-1001\AnyoneRead\Colors \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkUxManager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings \RPC Control\LRPC-c2eb4f3e6a35136a6c \RPC Control\OLEE41ABBB090E7D3F29C3E7C02CAE3 \Sessions\1\BaseNamedObjects \Sessions\1\BaseNamedObjects\5b8HWNDInterface:1006a \Sessions\1\BaseNamedObjects\5b8HWNDInterface:1007c \Sessions\1\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\1\BaseNamedObjects\SM0:1464:120:WilError_03 \Sessions\1\BaseNamedObjects\SM0:1464:120:WilError_03_p0 \Sessions\1\BaseNamedObjects\SM0:1464:120:WilError_03_p0h \Sessions\1\BaseNamedObjects\SM0:1464:304:WilStaging_02 \Sessions\1\BaseNamedObjects\SM0:1464:304:WilStaging_02_p0 \Sessions\1\BaseNamedObjects\SM0:1464:304:WilStaging_02_p0h \Sessions\1\BaseNamedObjects\WinSta0_DesktopSwitch \Sessions\1\Windows\Theme1660852187 \Sessions\1\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 \Winlogon 1472: C:\Windows\System32\dwm.exe \BaseNamedObjects\[CoreUI]-PID(1472)-TID(1864) 6c71ffee-dbbb-4f9e-8479-ffb094e2ca3b \BaseNamedObjects\[CoreUI]-PID(1472)-TID(1864) c39800ef-462d-4eae-9108-ea4dc3fa7428 \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) 16d12831-9ffa-49a2-9bdc-e9a310406acd \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) 523fe48e-ff0e-46dc-89e7-dbed8f786656 \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) 5a3853e1-f2d4-4036-b8cb-23c88514d560 \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) 70939cd8-3b7a-4fb0-b3bc-d9b5fe31de7b \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) 98bb5e51-20e5-4e8a-a144-469231acf4e0 \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) ae4c5987-0aa7-42e4-9342-b01d1f0ff6fe \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) b26f289f-e30a-40f9-8d95-79141f00ce8c \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) d94d4e54-f99e-47de-b01a-4f3646f9f2a6 \BaseNamedObjects\[CoreUI]-PID(1472)-TID(2056) fa5cb57a-0939-4668-a37a-a7f127871f18 \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Default \Device\0000003d \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\dwm.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\netmsg.dll.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\Dwm \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\Input \REGISTRY\USER \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates \RPC Control\LRPC-6b9eff447755a67f6d \RPC Control\OLEE3DB6272AE68837E3FC7B925F4A7 \Sessions\1\BaseNamedObjects \Sessions\1\BaseNamedObjects\DBWinMutex \Sessions\1\BaseNamedObjects\DWM_DX_FULLSCREEN_TRANSITION_EVENT \Sessions\1\BaseNamedObjects\DwmComposedEvent_1 \Sessions\1\BaseNamedObjects\SIPC_{2819B8FF-EB1C-4652-80F0-7AB4EFA88BE4} \Sessions\1\BaseNamedObjects\SM0:1472:120:WilError_03 \Sessions\1\BaseNamedObjects\SM0:1472:120:WilError_03_p0 \Sessions\1\BaseNamedObjects\SM0:1472:120:WilError_03_p0h \Sessions\1\BaseNamedObjects\SM0:1472:304:WilStaging_02 \Sessions\1\BaseNamedObjects\SM0:1472:304:WilStaging_02_p0 \Sessions\1\BaseNamedObjects\SM0:1472:304:WilStaging_02_p0h \Sessions\1\Windows\DispBrokerPort \Sessions\1\Windows\DwmApiPort \Sessions\1\Windows\Theme1660852187 \Sessions\1\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 \Winlogon 1540: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1540:304:WilStaging_02 \BaseNamedObjects\SM0:1540:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1540:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\gpsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\NamedPipe\lsass \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \RPC Control\LRPC-005e1730dadf3930f6 \RPC Control\LRPC-5c4a53798e7db437cb \RPC Control\OLEAEC548047C528A8F34E24E929677 \Windows\WindowStations\Service-0x0-3e7$ 1556: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1556:120:WilError_03 \BaseNamedObjects\SM0:1556:120:WilError_03_p0 \BaseNamedObjects\SM0:1556:120:WilError_03_p0h \BaseNamedObjects\SM0:1556:304:WilStaging_02 \BaseNamedObjects\SM0:1556:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1556:304:WilStaging_02_p0h \Default \Device\CNG \Device\Harddisk0\DR0 \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\CatRoot \Device\HarddiskVolume3\Windows\System32\catroot2\edb.log \Device\HarddiskVolume3\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb \Device\HarddiskVolume3\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb.jfm \Device\HarddiskVolume3\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb \Device\HarddiskVolume3\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb.jfm \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\ESENT.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\vsstrace.dll.mui \Device\KsecDD \KernelObjects\LowMemoryCondition \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\System Writer \REGISTRY\USER\S-1-5-20 \REGISTRY\USER\S-1-5-20\Control Panel\International \REGISTRY\USER\S-1-5-20\Software\Microsoft\SystemCertificates\CA \REGISTRY\USER\S-1-5-20\Software\Microsoft\SystemCertificates\Disallowed \REGISTRY\USER\S-1-5-20\Software\Microsoft\SystemCertificates\Root \REGISTRY\USER\S-1-5-20\Software\Microsoft\SystemCertificates\SmartCardRoot \REGISTRY\USER\S-1-5-20\Software\Microsoft\SystemCertificates\trust \REGISTRY\USER\S-1-5-20\Software\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\USER\S-1-5-20\Software\Policies\Microsoft\SystemCertificates \RPC Control\keysvc \RPC Control\OLE0AAF1A1016A4341410B6FF8251D3 \Windows\WindowStations\Service-0x0-3e4$ 1564: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\RdpPipeLockevent-Session2-0 \BaseNamedObjects\RdpProtocolStartedEvent-Session2-0 \BaseNamedObjects\RDPSchedulerEvent-4239883983974412915 \BaseNamedObjects\RDPSchedulerEvent-5086898255425379524 \BaseNamedObjects\RdpUpdateBuffer-Session2-0 \BaseNamedObjects\RdpUpdateBufferEmptyEvent-Session2-0 \BaseNamedObjects\RdpUpdatesFlushedEvent-Session2-0 \BaseNamedObjects\RdpWaitAbortEvent-Session2-0 \BaseNamedObjects\RotHintTable \BaseNamedObjects\SM0:1564:304:WilStaging_02 \BaseNamedObjects\SM0:1564:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1564:304:WilStaging_02_p0h \BaseNamedObjects\TSLicensingLock \Default \Device\00000008 \Device\00000022 \Device\00000035 \Device\0000003e \Device\0000003f \Device\00000040 \Device\00000041 \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\termsrv.dll.mui \Device\KsecDD \Device\NamedPipe\Ctx_WinStation_API_service \Device\NamedPipe\TermSrv_API_service \Device\NamedPipe\TSVCPIPE-00fa1e03-bbfe-43a5-91c5-cd013af798b2 \Device\NamedPipe\TSVCPIPE-13a12547-9206-4e60-99ea-9c6cfd201315 \Device\NamedPipe\TSVCPIPE-3adac3e6-2a29-4d49-8f48-b03474ce8fd8 \Device\NamedPipe\TSVCPIPE-53148c24-df40-4aa0-8a4d-6f608a4f9ca9 \Device\NamedPipe\TSVCPIPE-6b3140ee-a850-4de6-8bcb-31ce25f84310 \Device\NamedPipe\TSVCPIPE-7d6b9c91-095c-4c42-abbe-631fab592f9b \Device\NamedPipe\TSVCPIPE-8c67c6a2-bb08-4d89-8274-dc100ae0b0ca \Device\NamedPipe\TSVCPIPE-97e0bec3-52f9-4eae-9b83-fa3ef7ec3021 \Device\NamedPipe\TSVCPIPE-993a4670-4e46-4899-8e33-a5a551699001 \Device\NamedPipe\TSVCPIPE-a3222bc2-6a51-46ba-8aae-c6e1f26d57b4 \Device\NamedPipe\TSVCPIPE-a603b8c8-398b-41dd-aebb-612a017e000d \Device\NamedPipe\TSVCPIPE-cb7d9cf6-b3e7-4b58-b2bd-72bfd10cf2e6 \Device\NamedPipe\TSVCPIPE-e2090625-96f8-48c7-990a-f2f9714fc5ec \Device\NamedPipe\TSVCPIPE-e4c1756b-31ba-4232-9ea0-c0765722e591 \Device\NamedPipe\TSVCPIPE-ebfc06b9-94c0-4aed-851d-4d9cb78dce0d \Device\PcwDrv \Device\TermInptCDO \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-20\Control Panel\International \RPC Control\LcRpc \RPC Control\OLEDB380E159F59F9E6241A1989A045 \RPC Control\TermSrvApi \Windows\WindowStations\Service-0x0-3e4$ 1576: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:1576:304:WilStaging_02 \BaseNamedObjects\SM0:1576:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1576:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 1600: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1600:120:WilError_03 \BaseNamedObjects\SM0:1600:120:WilError_03_p0 \BaseNamedObjects\SM0:1600:120:WilError_03_p0h \BaseNamedObjects\SM0:1600:304:WilStaging_02 \BaseNamedObjects\SM0:1600:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1600:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\IdentityStore\Providers \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-039a66ad54eebd79c6 \RPC Control\OLEC6363A2224D49D8735F901586321 \Windows\WindowStations\Service-0x0-3e7$ 1808: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:1808:304:WilStaging_02 \BaseNamedObjects\SM0:1808:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1808:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\Afd \Device\CNG \Device\HarddiskVolume3 \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\Tasks \Device\KsecDD \Device\NamedPipe\atsvc \Device\NamedPipe\Winsock2\CatalogChangeListener-710-0 \Device\NamedPipe\wkssvc \Device\PcwDrv \Device\WMIDataDevice \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Configuration \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskStateFlags \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \RPC Control\LRPC-2c1fd40090e6b64456 \RPC Control\LRPC-7f40e0734a62f38938 \RPC Control\ubpmtaskhostchannel \Windows\WindowStations\Service-0x0-3e7$ 1840: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\RotHintTable \BaseNamedObjects\SM0:1840:304:WilStaging_02 \BaseNamedObjects\SM0:1840:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1840:304:WilStaging_02_p0h \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\RadioManagement \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\RadioManagement\{afd198ac-5f30-4e89-a789-5ddf60a69366}\BluetoothRadioState \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-3835d04fc41fffa68f \RPC Control\LRPC-4257dae9dfa373128a \RPC Control\LRPC-9eae49a2f118144bd2 \RPC Control\LRPC-c126986b488824efe0 \RPC Control\OLE92B3A878CAF6EA9E8AF78CD1DF28 \Windows\WindowStations\Service-0x0-3e7$ 1852: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1852:304:WilStaging_02 \BaseNamedObjects\SM0:1852:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1852:304:WilStaging_02_p0h \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\PcwDrv \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \RPC Control\IUserProfile2 \RPC Control\OLE72ED44804624AEFC273ADED7D93B \Windows\WindowStations\Service-0x0-3e7$ 1940: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1940:120:WilError_03 \BaseNamedObjects\SM0:1940:120:WilError_03_p0 \BaseNamedObjects\SM0:1940:120:WilError_03_p0h \BaseNamedObjects\SM0:1940:304:WilStaging_02 \BaseNamedObjects\SM0:1940:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1940:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \RPC Control\LRPC-32ddf0b650eafbb78d \RPC Control\OLE0CEC6D8816E21BFEFC8B1D79FE7B \Windows\WindowStations\Service-0x0-3e7$ 2000: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\CoreMessagingRegistrar \BaseNamedObjects\SM0:2000:304:WilStaging_02 \BaseNamedObjects\SM0:2000:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2000:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \Windows\WindowStations\Service-0x0-3e5$ 2008: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\RotHintTable \BaseNamedObjects\SM0:2008:304:WilStaging_02 \BaseNamedObjects\SM0:2008:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2008:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \RPC Control\LRPC-e72d7e111aa491896a \RPC Control\LRPC-ff6e3666789ef28045 \RPC Control\OLEC4B25AB26D489B41AE5C6768A7DF \Windows\WindowStations\Service-0x0-3e5$ 2016: (ERROR: 5) 1368: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1368:304:WilStaging_02 \BaseNamedObjects\SM0:1368:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1368:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\00000008 \Device\00000037 \Device\00000039 \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\printui.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\umrdp.dll.mui \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c \Device\Mup \Device\NamedPipe\TSVCPIPE-13a12547-9206-4e60-99ea-9c6cfd201315 \Device\NamedPipe\TSVCPIPE-a603b8c8-398b-41dd-aebb-612a017e000d \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Printers\DevModePerUser \RPC Control\OLE7B1B2654BEECD80197A0775A8A44 \RPC Control\RemoteDevicesLPC_API \RPC Control\TSUMRPD_PRINT_DRV_LPC_API \Windows\WindowStations\Service-0x0-3e7$ 1716: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:1716:304:WilStaging_02 \BaseNamedObjects\SM0:1716:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1716:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \RPC Control\LRPC-a854d5c1d7d128f2f6 \Windows\WindowStations\Service-0x0-3e5$ 2080: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2080:304:WilStaging_02 \BaseNamedObjects\SM0:2080:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2080:304:WilStaging_02_p0h \Default \Device\00000029 \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\icsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 2088: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:2088:120:WilError_03 \BaseNamedObjects\SM0:2088:120:WilError_03_p0 \BaseNamedObjects\SM0:2088:120:WilError_03_p0h \BaseNamedObjects\SM0:2088:304:WilStaging_02 \BaseNamedObjects\SM0:2088:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2088:304:WilStaging_02_p0h \Default \Device\00000028 \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE9927C0EA23EECA1BDC8EBFDB1923 \Windows\WindowStations\Service-0x0-3e7$ 2096: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2096:304:WilStaging_02 \BaseNamedObjects\SM0:2096:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2096:304:WilStaging_02_p0h \Default \Device\00000027 \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 2132: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2132:304:WilStaging_02 \BaseNamedObjects\SM0:2132:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2132:304:WilStaging_02_p0h \Default \Device\0000002d \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\UnifiedApiData \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\RdvVmAllowListRpc \Windows\WindowStations\Service-0x0-3e7$ 2156: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2156:304:WilStaging_02 \BaseNamedObjects\SM0:2156:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2156:304:WilStaging_02_p0h \Default \Device\0000002a \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 2228: (ERROR: 5) 2240: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:2240:120:WilError_03 \BaseNamedObjects\SM0:2240:120:WilError_03_p0 \BaseNamedObjects\SM0:2240:120:WilError_03_p0h \BaseNamedObjects\SM0:2240:304:WilStaging_02 \BaseNamedObjects\SM0:2240:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2240:304:WilStaging_02_p0h \Default \Device\0000002c \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLEDE72CF8FC1F08E1F2EE2BC4C9F0D \Windows\WindowStations\Service-0x0-3e7$ 2248: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2248:304:WilStaging_02 \BaseNamedObjects\SM0:2248:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2248:304:WilStaging_02_p0h \BaseNamedObjects\vmictimesync-mem-3ea648f2-f041-4db4-bb46-3f25ccfa9e0a \BaseNamedObjects\vmictimesync-mux-3ea648f2-f041-4db4-bb46-3f25ccfa9e0a \BaseNamedObjects\vmictimesync-sem-3ea648f2-f041-4db4-bb46-3f25ccfa9e0a \BaseNamedObjects\vmictimesync-stop-3ea648f2-f041-4db4-bb46-3f25ccfa9e0a \Default \Device\0000002b \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\VmGid \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\WindowStations\Service-0x0-3e5$ 2316: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\DBWinMutex \BaseNamedObjects\SM0:2316:304:WilStaging_02 \BaseNamedObjects\SM0:2316:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2316:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\Logs\StorGroupPolicy.log \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 2444: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\Microsoft Smart Card Resource Manager Started \BaseNamedObjects\SM0:2444:304:WilStaging_02 \BaseNamedObjects\SM0:2444:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2444:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\certprop.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\scksp.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc \Device\KsecDD \Device\Mup\TSCLIENT\SCARD\2 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\KeyGuard \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-4b3ebb4caefb6b5972 \Windows\WindowStations\Service-0x0-3e7$ 2480: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:2480:120:WilError_03 \BaseNamedObjects\SM0:2480:120:WilError_03_p0 \BaseNamedObjects\SM0:2480:120:WilError_03_p0h \BaseNamedObjects\SM0:2480:304:WilStaging_02 \BaseNamedObjects\SM0:2480:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2480:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\netprofmsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\NamedPipe\lsass \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Policies \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NlaSvc\Parameters\Internet \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \RPC Control\INlmDiagnosticsApi \RPC Control\LRPC-1510569de4ce43cb8f \RPC Control\nlaapi \RPC Control\nlaplg \RPC Control\OLE2C0D88A4CB3D122233AF73377CE8 \Windows\WindowStations\Service-0x0-3e4$ 2572: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:2572:304:WilStaging_02 \BaseNamedObjects\SM0:2572:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2572:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \RPC Control\OLEA33752F7F0BF7245A4751D5A3A9D \Windows\WindowStations\Service-0x0-3e5$ 2676: C:\Windows\System32\VSSVC.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:2676:304:WilStaging_02 \BaseNamedObjects\SM0:2676:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2676:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\vsstrace.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\VSSVC.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\ASR Writer \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\COM+ REGDB Writer \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\Registry Writer \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\Shadow Copy Optimization Writer \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE4E6214761ED4EF85C9A7497F61EC \Windows\WindowStations\Service-0x0-3e7$ 2764: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\AgentToWkssvcEvent \BaseNamedObjects\SM0:2764:304:WilStaging_02 \BaseNamedObjects\SM0:2764:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2764:304:WilStaging_02_p0h \BaseNamedObjects\wkssvc: MUP finished initializing event \BaseNamedObjects\WkssvcToAgentStartEvent \BaseNamedObjects\WkssvcToAgentStopEvent \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\LanmanDatagramReceiver \Device\Mup \Device\NamedPipe\wkssvc \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanWorkstation\Parameters \REGISTRY\USER\S-1-5-20\Control Panel\International \RPC Control\LRPC-90436d0cded6053725 \Windows\WindowStations\Service-0x0-3e4$ 2776: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2776:304:WilStaging_02 \BaseNamedObjects\SM0:2776:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2776:304:WilStaging_02_p0h \Default \Device\Afd \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Application.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\HardwareEvents.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Internet Explorer.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Key Management Service.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4CaptureMonitor.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-BitLocker%4BitLocker Management.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudFiles-Filter%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Containers-BindFlt%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcifs%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Cache%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Dump%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Device Management.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Driver Watchdog.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-DeviceEnum%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Audit.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-StorageVolume%4Diagnostic.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-StorageVolume%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Plugin-Passkey-Providers%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Security.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Setup.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Synced-Passkey-Provider%4Operatonal.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\System.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Windows PowerShell.evtx \Device\KsecDD \Device\NamedPipe\eventlog \Device\NamedPipe\Winsock2\CatalogChangeListener-ad8-0 \Device\PcwDrv \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ComputerName\ActiveComputerName \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\EventLog \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\EventLog\State \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-19\Control Panel\International \RPC Control\eventlog \Windows\WindowStations\Service-0x0-3e5$ 2784: (ERROR: 5) 2844: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:2844:120:WilError_03 \BaseNamedObjects\SM0:2844:120:WilError_03_p0 \BaseNamedObjects\SM0:2844:120:WilError_03_p0h \BaseNamedObjects\SM0:2844:304:WilStaging_02 \BaseNamedObjects\SM0:2844:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2844:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\es.dll \Device\HarddiskVolume3\Windows\System32\stdole2.tlb \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\EventSystem\Eventlog \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \RPC Control\OLE7B2A496E35CA1309640840100C24 \Windows\WindowStations\Service-0x0-3e5$ 2864: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\PfIuHistoryStoreSection \BaseNamedObjects\SM0:2864:304:WilStaging_02 \BaseNamedObjects\SM0:2864:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2864:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\SuperfetchScenarioNotify \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Superfetch \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Superfetch\StaticConfig \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management\PrefetchParameters \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-890d0182865b01363e \Windows\WindowStations\Service-0x0-3e7$ 2856: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2856:304:WilStaging_02 \BaseNamedObjects\SM0:2856:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2856:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \ThemeApiPort \Windows\Theme4153972102 \Windows\WindowStations\Service-0x0-3e7$ 2184: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:2184:304:WilStaging_02 \BaseNamedObjects\SM0:2184:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2184:304:WilStaging_02_p0h \BaseNamedObjects\TS Certificate Update Event \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \Device\NamedPipe\lsass \Device\NamedPipe\SessEnvPublicRpc \Device\NamedPipe\Winsock2\CatalogChangeListener-888-0 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-e6da9f1fcdbce3e1ea \RPC Control\OLED0E8CF692389A10F3AB08D614A64 \RPC Control\SessEnvPrivateRpc \Windows\WindowStations\Service-0x0-3e7$ 2588: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\SM0:2588:304:WilStaging_02 \BaseNamedObjects\SM0:2588:304:WilStaging_02_p0 \BaseNamedObjects\SM0:2588:304:WilStaging_02_p0h \Default \Device\Afd \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\drivers\etc \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\InterfaceSpecificParameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsPolicyConfig \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\DNSRegisteredAdapters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \RPC Control\DNSResolver \RPC Control\LRPC-2002f77271dc1cd177 \Windows\WindowStations\Service-0x0-3e4$ 3076: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SENS Information Cache \BaseNamedObjects\SENS Started Event \BaseNamedObjects\SM0:3076:304:WilStaging_02 \BaseNamedObjects\SM0:3076:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3076:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-ff92d4437323b6a7ba \RPC Control\OLE1F2B5F0D2759585D48406B62C3EE \RPC Control\senssvc \Windows\WindowStations\Service-0x0-3e7$ 3172: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\FontCachePort \BaseNamedObjects\SM0:3172:304:WilStaging_02 \BaseNamedObjects\SM0:3172:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3172:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\Fonts \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeuib.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeuisl.ttf \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-18.dat \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-21-940397446-1893263122-1169132827-1001.dat \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-System.dat \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontFace.dat \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-18.dat \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-940397446-1893263122-1169132827-1001.dat \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\FontCache\SystemFontProvider \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows NT\CurrentVersion\Fonts \Windows\WindowStations\Service-0x0-3e5$ 3180: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3180:120:WilError_03 \BaseNamedObjects\SM0:3180:120:WilError_03_p0 \BaseNamedObjects\SM0:3180:120:WilError_03_p0h \BaseNamedObjects\SM0:3180:304:WilStaging_02 \BaseNamedObjects\SM0:3180:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3180:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\AudioEndpointBuilder.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\AudioEndpointBuilderClientRpc \Windows\WindowStations\Service-0x0-3e7$ 3436: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\AudioResourceAcquisitionMutex \BaseNamedObjects\AudioSrv_CanAcceptMMCClient \BaseNamedObjects\Client_Atmos_Check_Event \BaseNamedObjects\mmGlobalPnpInfo \BaseNamedObjects\SM0:3436:120:WilError_03 \BaseNamedObjects\SM0:3436:120:WilError_03_p0 \BaseNamedObjects\SM0:3436:120:WilError_03_p0h \BaseNamedObjects\SM0:3436:304:WilStaging_02 \BaseNamedObjects\SM0:3436:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3436:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\AudioSrv.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\AllUsers\{CE34E6D8-AA9D-4201-9F87-2CC8E4F694DE} \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\RemoteRender\{6C26BA7D-F0B2-4225-B422-8168C5261E45}\Properties \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows NT\CurrentVersion \RPC Control\AudioClientRpc \RPC Control\Audiosrv \RPC Control\AudioSrvDiagnosticsRpc \RPC Control\OLE7A9D9D98D9C2E726EF368AAB5518 \RPC Control\PlaybackManagerRpc \RPC Control\SpatialSoundDataManagerRpc \Windows\WindowStations\Service-0x0-3e5$ 3540: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:3540:304:WilStaging_02 \BaseNamedObjects\SM0:3540:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3540:304:WilStaging_02_p0h \BaseNamedObjects\TabletHardwarePresent \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\Tablet PC \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \Sessions\1\BaseNamedObjects\{773F1B9A-35B9-4E95-83A0-A210F2DE3B37}-sdl \Sessions\1\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-request2 \Sessions\1\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-request3 \Sessions\2\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault2 \Sessions\2\BaseNamedObjects\{773F1B9A-35B9-4E95-83A0-A210F2DE3B37}-sdl \Sessions\2\BaseNamedObjects\{773F1B9A-35B9-4E95-83A0-A210F2DE3B37}-uds \Sessions\2\BaseNamedObjects\{958DA730-EDB5-43CE-8A56-776CCC5AB7E1}-request \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-crashed \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-digitizer \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-NoDigitizer \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-request \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-request2 \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-request3 \Sessions\2\BaseNamedObjects\{DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-show \Windows\WindowStations\Service-0x0-3e7$ 3636: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3636:120:WilError_03 \BaseNamedObjects\SM0:3636:120:WilError_03_p0 \BaseNamedObjects\SM0:3636:120:WilError_03_p0h \BaseNamedObjects\SM0:3636:304:WilStaging_02 \BaseNamedObjects\SM0:3636:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3636:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\dusmsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-19\Control Panel\International \REGISTRY\USER\S-1-5-19\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-19\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-19\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \RPC Control\LRPC-c243ead6cd6800543b \RPC Control\OLE959D81EEEBBCABBBA905CD8AA765 \Windows\WindowStations\Service-0x0-3e5$ 3644: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:3644:304:WilStaging_02 \BaseNamedObjects\SM0:3644:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3644:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parameters\Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parametersv6 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parametersv6\Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \RPC Control\dhcpcsvc \RPC Control\dhcpcsvc6 \Windows\WindowStations\Service-0x0-3e5$ 3780: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\SM0:3780:304:WilStaging_02 \BaseNamedObjects\SM0:3780:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3780:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \RPC Control\LRPC-feacddd3aeb1dee77e \Windows\WindowStations\Service-0x0-3e5$ 3828: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\SM0:3828:120:WilError_03 \BaseNamedObjects\SM0:3828:120:WilError_03_p0 \BaseNamedObjects\SM0:3828:120:WilError_03_p0h \BaseNamedObjects\SM0:3828:304:WilStaging_02 \BaseNamedObjects\SM0:3828:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3828:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Ndis \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\WcmSvc \REGISTRY\MACHINE\SOFTWARE\Microsoft\WcmSvc\CellularFailover \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\Local \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \RPC Control\LRPC-9261fd2290b61c8705 \RPC Control\OLE27FA81675BF95AC2A461163D6FD2 \Windows\WindowStations\Service-0x0-3e5$ 3856: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3856:304:WilStaging_02 \BaseNamedObjects\SM0:3856:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3856:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE7FD1532317D5F933A1DB83D69D8B \Windows\WindowStations\Service-0x0-3e7$ 4012: C:\Windows\System32\spoolsv.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\RouterPreInitEvent \BaseNamedObjects\SM0:4012:304:WilStaging_02 \BaseNamedObjects\SM0:4012:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4012:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\APMon.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\inetpp.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\localspl.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\spoolsv.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\usbmon.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\win32spl.dll.mui \Device\KsecDD \Device\NamedPipe\lsass \Device\NamedPipe\srvsvc \Device\NamedPipe\TSVCPIPE-3adac3e6-2a29-4d49-8f48-b03474ce8fd8 \Device\NamedPipe\TSVCPIPE-97e0bec3-52f9-4eae-9b83-fa3ef7ec3021 \Device\NamedPipe\TSVCPIPE-cb7d9cf6-b3e7-4b58-b2bd-72bfd10cf2e6 \Device\NamedPipe\TSVCPIPE-e2090625-96f8-48c7-990a-f2f9714fc5ec \Device\NamedPipe\TSVCPIPE-e4c1756b-31ba-4232-9ea0-c0765722e591 \Device\NamedPipe\Winsock2\CatalogChangeListener-fac-0 \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\Appmon \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\Local Port \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\Standard TCP/IP Port \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\USB Monitor \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\Virtual Port Monitor \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\WSD Port \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\WSD Port\Adapters\IPP \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\WSD Port\Adapters\WSPrint \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Print\Providers\LanMan Print Services\PortNames \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-ae597e6f7844b3c2c2 \RPC Control\OLEECE36E8C6B97FD0D298B1897B65A \Windows\WindowStations\WinSta0 4068: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\BFE_Notify_Event_{184af452-d54d-45f3-8971-ca8cfe52b3dc} \BaseNamedObjects\BFE_Notify_Event_{2040798e-fea5-4a3b-8d90-1f35687f43de} \BaseNamedObjects\BFE_Notify_Event_{424aa9c9-eb30-4639-a419-30ede0dc47bd} \BaseNamedObjects\BFE_Notify_Event_{55370a00-8a78-4c05-92cf-9d67e401e0de} \BaseNamedObjects\BFE_Notify_Event_{80df7c83-ab04-4cc3-a57d-4d75c79e27bd} \BaseNamedObjects\BFE_Notify_Event_{a9570638-a89d-41bd-ad54-22ea7957d8cc} \BaseNamedObjects\BFE_Notify_Event_{ae3c9cb7-f2d0-4794-a7bc-a82af68ae9ff} \BaseNamedObjects\BFE_Notify_Event_{d1b08b1a-f041-4b7f-be77-c1f20406a634} \BaseNamedObjects\BFE_Notify_Event_{fd820272-3f55-4037-9326-d35633ff1498} \BaseNamedObjects\SM0:4068:120:WilError_03 \BaseNamedObjects\SM0:4068:120:WilError_03_p0 \BaseNamedObjects\SM0:4068:120:WilError_03_p0h \BaseNamedObjects\SM0:4068:304:WilStaging_02 \BaseNamedObjects\SM0:4068:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4068:304:WilStaging_02_p0h \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\bfe.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\FirewallAPI.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\IPSECDOSP \Device\KsecDD \Device\MPS \Device\NamedPipe\wkssvc \Device\Nsi \Device\NXTIPSEC \Device\PcwDrv \Device\WFP \Device\WfpAle \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\ACService \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\AppCs \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\PortKeywords\DHCP \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\PortKeywords\IPTLSIn \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\PortKeywords\IPTLSOut \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\PortKeywords\RPC-EPMap \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Parameters\PortKeywords\Teredo \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch2 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\HyperVFirewallPolicy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\Mdm \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\HyperVFirewallPolicy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-19\Control Panel\International \REGISTRY\USER\S-1-5-19\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-19\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-19\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \RPC Control\LRPC-4298deb8b9d955c7d5 \RPC Control\LRPC-646eda8fa56c817993 \RPC Control\LRPC-92067564f008740735 \RPC Control\LRPC-b9698655704614cdae \RPC Control\OLE98F7F06C8F637A9E6A31FF7FCACD \Windows\WindowStations\Service-0x0-3e5$ 3304: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3304:120:WilError_03 \BaseNamedObjects\SM0:3304:120:WilError_03_p0 \BaseNamedObjects\SM0:3304:120:WilError_03_p0h \BaseNamedObjects\SM0:3304:304:WilStaging_02 \BaseNamedObjects\SM0:3304:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3304:304:WilStaging_02_p0h \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{19D0E4AD-655E-42B3-BAE2-8E8A48E3685C} \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{D96521B5-5EC7-4C5A-A13C-4BF68E23D445} \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{E5A8F6E0-05AB-4D6C-80AE-3A41BF34C1DF} \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{F35FACD2-8937-4638-89B1-51C9DC7C2B5B} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{30E3E0B8-73E4-48CD-AB34-2CFBF604BD73} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{43D3F9E5-CAB3-4509-A49A-F6DC4589E63D} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{9DFBAE9B-6964-47FF-A407-1B68C5654DBA} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{F7A066BC-2FE1-484E-A9BC-70F884D63F56} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{F937CEAD-B50D-4C26-84A9-63B056B2F511} \Default \Device\CNG \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Activation \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Activation\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Activation\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Activation\Index\ActivationKey \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppExtension\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppExtension\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppExtension\Index\ExtensionAndName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppExtension\Index\Name \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Index\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Index\PackageAndPackageRelativeApplicationId \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationExtension\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationExtension\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationExtension\Index\Application \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationExtension\Index\ApplicationAndCategory \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationExtension\Index\Category \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\Application \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\PackageUser \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\PackageUserAndApplication \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\User \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\UserAndApplication \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\UserAndApplicationUserModelId \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Index\Extension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Index\HostName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Index\HostNameAndExtensionAndPath \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Index\ProgID \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandler\Index\ProgIDAndExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandlerGroup \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandlerGroup\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandlerGroup\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandlerGroup\Index\Extension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\AppUriHandlerGroup\Index\NameAndExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DependencyGraph \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DependencyGraph\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DependencyGraph\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DependencyGraph\Index\UserAndDependentPackageAndDependencyType \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Index\DynamicAppUriHandlerGroup \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Index\HostName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Index\HostNameAndDynamicAppUriHandlerGroupAndPath \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Index\ProgID \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandler\Index\ProgIDAndDynamicAppUriHandlerGroup \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandlerGroup \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandlerGroup\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandlerGroup\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DynamicAppUriHandlerGroup\Index\UserAndPackageFamilyAndName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation\Index\Extension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation\Index\FileType \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation\Index\FileTypeAndExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\FileTypeAssociation\Index\ProgID \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\HostRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\HostRuntime\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\HostRuntime\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\HostRuntime\Index\HostIdAndPackageExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\HostRuntime\Index\PackageExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFamily \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExtension\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExtension\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExtension\Index\Category \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExtension\Index\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExtension\Index\PackageAndCategory \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Index\UserAndPackage \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageSID \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamilyUser \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamilyUser\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamilyUser\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamilyUser\Index\PackageFamily \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamilyUser\Index\User \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamilyUser\Index\UserAndPackageFamily \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageMachineStatus \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageMachineStatus\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageMachineStatus\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageMachineStatus\Index\PackageFullName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageMachineStatus\Index\PackageIdentity \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageProperty \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageProperty\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageProperty\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageProperty\Index\Name \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageProperty\Index\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageProperty\Index\PackageAndName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index\User \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index\UserAndPackage \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus\Index\UserAndPackageFullName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUserStatus\Index\UserAndPackageIdentity \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PkgExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PkgExtension\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PkgExtension\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PkgExtension\Index\ExtensionAndName \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PkgExtension\Index\Name \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol\Index\Extension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol\Index\Name \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol\Index\NameAndExtension \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Protocol\Index\ProgID \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-dcbc87583c7cdcdd1c \RPC Control\OLE38FC12568C6294F00BBB2E47C575 \Windows\WindowStations\Service-0x0-3e7$ 3532: C:\Windows\System32\svchost.exe \...\Installing \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\AmiUtcThrottlingSemaphore \BaseNamedObjects\AmiUtcThrottlingTimer2 \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \BaseNamedObjects\DiagTrackActiveEvent \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\InventorySynchronizationInventoryApplicationFileEvent3532 \BaseNamedObjects\InventorySynchronizationInventoryApplicationFileMemory3532 \BaseNamedObjects\InventorySynchronizationInventoryApplicationFileMutex3532 \BaseNamedObjects\MicrosoftWindowsPerformanceRecorderControlSingletonEvent_DiagTrackMiniLogger \BaseNamedObjects\SM0:3532:120:WilError_03 \BaseNamedObjects\SM0:3532:120:WilError_03_p0 \BaseNamedObjects\SM0:3532:120:WilError_03_p0h \BaseNamedObjects\SM0:3532:304:WilStaging_02 \BaseNamedObjects\SM0:3532:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3532:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\windows_shell_global_counters \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\Harddisk0\DR0 \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\EventStore.db \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\EventStore.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\EventStore.db-wal \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db-wal \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\Sideload \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db-wal \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Web.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui \Device\KsecDD \Device\NamedPipe\wkssvc \Device\Nsi \Device\PcwDrv \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{74d874b2-32a8-8ef1-8d46-d695d73cb7e0}\Root \REGISTRY\A\{74d874b2-32a8-8ef1-8d46-d695d73cb7e0}\Root\InventoryApplicationFile \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Managed Desktop \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\Aggregation \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\AsimovUploader\CostDeferredBandwidthMonitor \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\EventTranscriptKey \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\LocalSettings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\Scenarios \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Privacy \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability\PBR \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedPC \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\XboxGaming \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Privacy \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CloudContent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\DataCollection \RPC Control\LRPC-cebead718b972fef22 \RPC Control\OLE1B52447DB2CB06B674C1BB7262D4 \Windows\WindowStations\Service-0x0-3e7$ 3516: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\BFE_Notify_Event_{55370a00-8a78-4c05-92cf-9d67e401e0de} \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\SM0:3516:304:WilStaging_02 \BaseNamedObjects\SM0:3516:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3516:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\Afd \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\iphlpsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\wldap32.dll.mui \Device\KsecDD \Device\NamedPipe\wkssvc \Device\Nsi \Device\PcwDrv \Device\WMIDataDevice \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\iphlpsvc\Parameters\ADHarvest \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections \RPC Control\LRPC-bab3c52e75473d6fd7 \RPC Control\OLEC99612298669936DF519CC9E0610 \RPC Control\TeredoControl \RPC Control\TeredoDiagnostics \Windows\WindowStations\Service-0x0-3e7$ 3120: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3120:120:WilError_03 \BaseNamedObjects\SM0:3120:120:WilError_03_p0 \BaseNamedObjects\SM0:3120:120:WilError_03_p0h \BaseNamedObjects\SM0:3120:304:WilStaging_02 \BaseNamedObjects\SM0:3120:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3120:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\WDI_{ddfa2eac-ef27-48bf-9e2e-a200177b2cc1} \Default \Device\CNG \Device\DeviceApi \Device\Harddisk0\DR0 \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\ESENT.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\sru\SRU.log \Device\HarddiskVolume3\Windows\System32\sru\SRUDB.dat \Device\HarddiskVolume3\Windows\System32\sru\SRUDB.jfm \Device\KsecDD \Device\Mup \Device\NduIoDevice \Device\Nsi \KernelObjects\HighCommitCondition \KernelObjects\LowCommitCondition \KernelObjects\LowMemoryCondition \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SRUM\Extensions\{d10ca2fe-6fcf-4f6d-848e-b2e99266fa89} \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \RPC Control\LRPC-3f9fa844104d17b9ef \RPC Control\OLEB55F3FA4A341DB3CE6AD11174BA7 \Windows\WindowStations\Service-0x0-3e5$ 3588: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:3588:304:WilStaging_02 \BaseNamedObjects\SM0:3588:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3588:304:WilStaging_02_p0h \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3 \Device\HarddiskVolume3\$Extend\$ObjId:$O:$INDEX_ALLOCATION \Device\HarddiskVolume3\System Volume Information\tracking.log \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\NamedPipe\trkwks \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\trkwks \Security\TRKWKS_EVENT \Security\TRKWKS_PORT \Windows\WindowStations\Service-0x0-3e7$ 3740: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3740:304:WilStaging_02 \BaseNamedObjects\SM0:3740:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3740:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE72665950BA02C97A91E7195C9ADE \Windows\WindowStations\Service-0x0-3e7$ 3804: (ERROR: 5) 1008: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1008:304:WilStaging_02 \BaseNamedObjects\SM0:1008:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1008:304:WilStaging_02_p0h \BaseNamedObjects\WBEM_ESS_OPEN_FOR_BUSINESS \BaseNamedObjects\WINMGMT_COREDLL_CANSHUTDOWN \BaseNamedObjects\WINMGMT_PROVIDER_CANSHUTDOWN \BaseNamedObjects\Wmi Provider Sub System Counters \BaseNamedObjects\WMI_ProcessIdleTasksComplete \BaseNamedObjects\WMI_ProcessIdleTasksStart \BaseNamedObjects\WMI_RevAdap_ACK \BaseNamedObjects\WMI_RevAdap_Set \BaseNamedObjects\WMI_SysEvent_LodCtr \BaseNamedObjects\WMI_SysEvent_UnLodCtr \BaseNamedObjects\WmiProviderSubSystemHostJob \BaseNamedObjects\WmiProviderSubSystemSpecialHostJob \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\vsstrace.dll.mui \Device\HarddiskVolume3\Windows\System32\wbem\MOF \Device\HarddiskVolume3\Windows\System32\wbem\Repository\INDEX.BTR \Device\HarddiskVolume3\Windows\System32\wbem\Repository\MAPPING1.MAP \Device\HarddiskVolume3\Windows\System32\wbem\Repository\MAPPING2.MAP \Device\HarddiskVolume3\Windows\System32\wbem\Repository\MAPPING3.MAP \Device\HarddiskVolume3\Windows\System32\wbem\Repository\OBJECTS.DATA \Device\KsecDD \Device\WMIDataDevice \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Wbem\WMIMigration \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\WMI Writer \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE6CB03F1F1EE7AD949398C093C8DB \Windows\WindowStations\Service-0x0-3e7$ 4004: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:4004:304:WilStaging_02 \BaseNamedObjects\SM0:4004:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4004:304:WilStaging_02_p0h \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \RPC Control\OLE60B4AD720C1BF88B628C69818F17 \Windows\WindowStations\Service-0x0-3e5$ 2852: (ERROR: 5) 4224: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\LanmanServerNetworkInitialized \BaseNamedObjects\SM0:4224:304:WilStaging_02 \BaseNamedObjects\SM0:4224:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4224:304:WilStaging_02_p0h \BaseNamedObjects\Srv-Smb1Started \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\NamedPipe\lsass \Device\NamedPipe\srvsvc \Device\Nsi \Device\Srv2 \Device\SrvAdmin \KernelObjects\MaximumCommitCondition \KnownDlls \LanmanServerAnnounceEvent \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\ShareProviders \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-9eef1c407c9c006758 \Windows\WindowStations\Service-0x0-3e7$ 4632: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \BaseNamedObjects\SM0:4632:120:WilError_03 \BaseNamedObjects\SM0:4632:120:WilError_03_p0 \BaseNamedObjects\SM0:4632:120:WilError_03_p0h \BaseNamedObjects\SM0:4632:304:WilStaging_02 \BaseNamedObjects\SM0:4632:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4632:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\KsecDD \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ProgIdIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \RPC Control\liveidsvcnotify \RPC Control\LRPC-7777966c5a48d9f448 \RPC Control\OLE2EDD8CF865BEA122BED79C4BF456 \Windows\WindowStations\Service-0x0-3e7$ 4744: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:4744:304:WilStaging_02 \BaseNamedObjects\SM0:4744:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4744:304:WilStaging_02_p0h \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\RadioManagement \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\RadioManagement\SystemRadioState \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\RadioManagement\{afd198ac-5f30-4e89-a789-5ddf60a69366}\BluetoothRadioState \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \RPC Control\OLE7CAF09C3455959A06320F438E670 \Windows\WindowStations\Service-0x0-3e5$ 4880: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:4880:304:WilStaging_02 \BaseNamedObjects\SM0:4880:304:WilStaging_02_p0 \BaseNamedObjects\SM0:4880:304:WilStaging_02_p0h \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-2804c5892659ac4515 \RPC Control\OLE185EF1250B0D6B5784D6B723B22A \Windows\WindowStations\Service-0x0-3e7$ 4888: (ERROR: 5) 5068: C:\Windows\System32\AggregatorHost.exe \BaseNamedObjects \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \BaseNamedObjects\SM0:5068:120:WilError_03 \BaseNamedObjects\SM0:5068:120:WilError_03_p0 \BaseNamedObjects\SM0:5068:120:WilError_03_p0h \BaseNamedObjects\SM0:5068:304:WilStaging_02 \BaseNamedObjects\SM0:5068:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5068:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\UUS\State\_active.uusver \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\UUS\Packages\Preview \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-f6991d7669da4af7dc \Windows\WindowStations\Service-0x0-3e7$ 764: (ERROR: 5) 1176: C:\Windows\System32\winlogon.exe \BaseNamedObjects\000000000007cda3_WlballoonAlternateCredsNotificationEventName \BaseNamedObjects\000000000007cda3_WlballoonKerberosCloudPasswordExpired \BaseNamedObjects\000000000007cda3_WlballoonKerberosNotificationEventName \BaseNamedObjects\000000000007cda3_WlballoonNTLMNotificationEventName \BaseNamedObjects\000000000007cda3_WlballoonSmartCardUnlockNotificationEventName \BaseNamedObjects\000000000007cdd4_WlballoonAlternateCredsNotificationEventName \BaseNamedObjects\000000000007cdd4_WlballoonKerberosCloudPasswordExpired \BaseNamedObjects\000000000007cdd4_WlballoonKerberosNotificationEventName \BaseNamedObjects\000000000007cdd4_WlballoonNTLMNotificationEventName \BaseNamedObjects\000000000007cdd4_WlballoonSmartCardUnlockNotificationEventName \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\WinlogonLogoff \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\KsecDD \Disconnect \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\GPClient \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\Profiles \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\Sens \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\SessionEnv \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\TermSrv \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\Software\Microsoft\TIP\TestResults \REGISTRY\USER \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \RPC Control\WMsgKRpc0422F52 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\ShellDesktopSwitchEvent \Sessions\2\BaseNamedObjects\SM0:1176:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:1176:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:1176:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:1176:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:1176:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:1176:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\ThemesStartEvent \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\ThemeSection \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 \Winlogon 5348: C:\Windows\System32\WUDFHost.exe \BaseNamedObjects \BaseNamedObjects\RdpCursorShape_S2_U0 \BaseNamedObjects\RdpFrameBuffer_S2_M0_U0 \BaseNamedObjects\RdpPipeLockevent-Session2-0 \BaseNamedObjects\RDPSchedulerEvent-5086898255425379524 \BaseNamedObjects\RdpUpdateBuffer-Session2-0 \BaseNamedObjects\RdpUpdateBufferEmptyEvent-Session2-0 \BaseNamedObjects\RdpWaitAbortEvent-Session2-0 \BaseNamedObjects\SM0:5348:304:WilStaging_02 \BaseNamedObjects\SM0:5348:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5348:304:WilStaging_02_p0h \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\drivers\UMDF\en-US\IddCx.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\d2d1.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\DWrite.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\SHCore.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\WUDFHost.exe.mui \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WUDF\Services\IddCx0102\Parameters \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WUDF\Services\IddCx0102\State \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WUDF\Services\RdpIdd\Parameters \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WUDF\Services\RdpIdd\State \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SWD\RemoteDisplayEnum\RdpIdd_IndirectDisplay&SessionId_0002\Device Parameters \REGISTRY\USER\S-1-5-19 \REGISTRY\USER\S-1-5-19\Control Panel\International \UMDFCommunicationPorts\WUDF\HostProcess-9fc8b80f-2f60-46bf-884e-04ab243588e7 \UMDFCommunicationPorts\WUDF\HostProcess-a41397d2-0b9b-474e-84d4-afd634a095fb \UMDFCommunicationPorts\WUDF\HostProcess-aad421fb-bc2b-488a-b664-8bb3292a06f6 \UMDFCommunicationPorts\WUDF\HostProcess-ae7a2b7a-b9c9-4fd3-adc9-749e4ccb9213 \Windows\WindowStations\Service-0x0-3e5$ 5340: C:\Windows\System32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32 \KnownDlls \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \Sessions\2\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523 \Sessions\2\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:5340:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:5340:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-95739096-486727260-2033287795-3853587803-1685597119-444378811-2746676523\SM0:5340:304:WilStaging_02_p0h 5384: C:\Windows\System32\dwm.exe \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5616) 73ca3ea2-f7bc-493d-b212-77b88e69240e \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5616) c6270eab-c1ff-463c-947f-91af93af5944 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 18e04d69-24ef-46f8-8688-2ac0803a2b1d \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 1ab224c4-c0d2-44a4-adc5-6685a580898d \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 497edfc8-7c6e-4745-b987-01e9b1d51968 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 4f56f326-62e9-4663-8769-8e75d3e34f85 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 87ccdbfd-7cbf-43c2-81c6-d1d65728ffb7 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 8d1abc0f-54c3-4e17-aee5-cae8affb5d28 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) 9bd9da1f-d4c0-4cf1-9168-2e038865a9e2 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) d891f568-bac0-4d4b-bf2c-950083bbdc10 \BaseNamedObjects\[CoreUI]-PID(5384)-TID(5672) ec18311e-aa77-483f-a2fe-1e1c2bdf4b41 \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\d2d1.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\dwm.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\Dwm \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\Input \REGISTRY\USER \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\DWM \RPC Control\OLE290CD42FCBD2A4EB9DE73730868A \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\DBWinMutex \Sessions\2\BaseNamedObjects\DWM_DX_FULLSCREEN_TRANSITION_EVENT \Sessions\2\BaseNamedObjects\DwmComposedEvent_1 \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\2\BaseNamedObjects\SM0:5384:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:5384:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:5384:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:5384:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:5384:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:5384:304:WilStaging_02_p0h \Sessions\2\Windows\DispBrokerPort \Sessions\2\Windows\DwmApiPort \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 \Winlogon 5744: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:5744:304:WilStaging_02 \BaseNamedObjects\SM0:5744:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5744:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\Mup\TSCLIENT\SCARD\2 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-22e023c5844cbd6608 \Windows\WindowStations\Service-0x0-3e7$ 5936: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:5936:120:WilError_03 \BaseNamedObjects\SM0:5936:120:WilError_03_p0 \BaseNamedObjects\SM0:5936:120:WilError_03_p0h \BaseNamedObjects\SM0:5936:304:WilStaging_02 \BaseNamedObjects\SM0:5936:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5936:304:WilStaging_02_p0h \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\DsmSvc\State \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\DeviceSetupManager \RPC Control\OLE4F4DD702F857A0B7F6F82ED0536A \Windows\WindowStations\Service-0x0-3e7$ 5480: C:\Windows\System32\wbem\WmiPrvSE.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:5480:304:WilStaging_02 \BaseNamedObjects\SM0:5480:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5480:304:WilStaging_02_p0h \BaseNamedObjects\WBEM_ESS_OPEN_FOR_BUSINESS \BaseNamedObjects\Wmi Provider Sub System Counters \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\KsecDD \Device\PcwDrv \Device\WMIDataDevice \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE6E902308C348679EC6C6B662CD49 \Windows\WindowStations\Service-0x0-3e7$ 5368: C:\Windows\System32\dllhost.exe \...\Dmrc_mtx_409a9db1-a045-4296-8d2c-9d71016c846b \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:5368:304:WilStaging_02 \BaseNamedObjects\SM0:5368:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5368:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\DeviceMetadataStore \Device\HarddiskVolume3\Windows\System32 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLE462CF168C480F9F4472FAFF16DC9 \Windows\WindowStations\Service-0x0-3e7$ 5456: C:\Windows\System32\svchost.exe \...\WerSvcSystemPermissionsEvent \BaseNamedObjects \BaseNamedObjects\SM0:5456:304:WilStaging_02 \BaseNamedObjects\SM0:5456:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5456:304:WilStaging_02_p0h \Device\CNG \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\WER\Temp\7b1de5ac-ffd9-4c81-8c0d-cfb410e78be4 \Device\HarddiskVolume3\Windows\System32 \Device\KsecDD \KernelObjects\SystemErrorPortReady \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \WindowsErrorReportingServicePort 3512: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:3512:304:WilStaging_02 \BaseNamedObjects\SM0:3512:304:WilStaging_02_p0 \BaseNamedObjects\SM0:3512:304:WilStaging_02_p0h \Default \Device\CNG \Device\DD9ADAAA-2585-41C5-9847-28A19BA9F344 \Device\F70CD4CC-76B0-48DE-817F-4E22CCABCC17 \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \RPC Control\OLE08BDAB682039AA02BBA27BE46D9E \Windows\WindowStations\Service-0x0-3e5$ 4928: C:\Windows\System32\rdpclip.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\rdpclip.exe.mui \Device\KsecDD \Device\NamedPipe\TSVCPIPE-7d6b9c91-095c-4c42-abbe-631fab592f9b \Device\NamedPipe\TSVCPIPE-993a4670-4e46-4899-8e33-a5a551699001 \Device\NamedPipe\TSVCPIPE-a3222bc2-6a51-46ba-8aae-c6e1f26d57b4 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\HintApiRPCEntry#2 \RPC Control\OLEED3B78890509DEAFF8B58665AB6D \RPC Control\UMRdpEndpoint_2 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\RDPClip-Disconnect \Sessions\2\BaseNamedObjects\RDPClip-Reconnect \Sessions\2\BaseNamedObjects\RdpClipAlreadyRunningMutex \Sessions\2\BaseNamedObjects\RdpDisplayControlMutex \Sessions\2\BaseNamedObjects\ShellDesktopSwitchEvent \Sessions\2\BaseNamedObjects\SM0:4928:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:4928:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:4928:304:WilStaging_02_p0h \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 2792: C:\Windows\System32\sihost.exe \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 05e60faf-acd4-4a27-957b-fcc7217c0cba \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 0f1771ab-91e9-43a1-b085-317f4c513b95 \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 18cbf0cd-6230-4b9b-9b1b-cd68a83d1beb \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 1bc135b8-ae17-4b2c-8a56-86c74b5cdd11 \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 36bc08cd-6cc0-4d9d-8cff-9d3808661255 \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 4754dcd3-8c5b-4077-9f66-8c55a46ebbb7 \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 49ea931f-3464-40f2-9df9-b9515ee18dcf \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 6d8338df-acf1-41dd-9fa6-4dc6654162b9 \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) 90860c77-4360-475a-9e06-0fd3452f654e \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) ac55527d-926f-4a0c-9c91-2487c65c3ee5 \BaseNamedObjects\[CoreUI]-PID(2792)-TID(6388) df7cbb94-3103-4555-9c92-57dab2d2dd0a \BaseNamedObjects\[CoreUI]-PID(2792)-TID(7484) 6b1f22ad-ab40-4ffd-b4fe-178b526c16a0 \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\PipeReadyEvent_x749D8C98-5673-4A39-8B7F-093E68E9A8AEy \BaseNamedObjects\PipeReadyEvent_xBB39560A-9E02-4F49-B130-DC18DDFA6789y \BaseNamedObjects\PipeReadyEvent_xFD54325F-155D-4CB3-938C-87D365277D2Dy \BaseNamedObjects\windows_shell_global_counters \Default \Device\Bam \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\CoreUI\Navigation\ActivationPolicy \REGISTRY\MACHINE\SYSTEM\Software\Microsoft\TIP\AggregateResults\10.0.26100.4946 \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ShellUIHosts\ClickToDo \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ShellUIHosts\CopilotNudges \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ShellUIHosts\CrossDeviceResumeHost \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ShellUIHosts\ShellHost \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Extensions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Extensions\ContractId \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-6f6f81903664e8d206 \RPC Control\OLEAB64E5A2A88EA2DC8D270B277ABA \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\AllShellUIHostsReadyEvent \Sessions\2\BaseNamedObjects\AppReadinessComplete \Sessions\2\BaseNamedObjects\BINotifiedNewSessionEvent \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\HAMNotifiedNewSessionEvent \Sessions\2\BaseNamedObjects\NavigationServer Started \Sessions\2\BaseNamedObjects\SIHostShutdownEvent \Sessions\2\BaseNamedObjects\SM0:2792:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:2792:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:2792:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:2792:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:2792:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:2792:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\Stop NavigationServer \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 6220: C:\Windows\System32\svchost.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Users\GT\AppData\Local\ConnectedDevicesPlatform\L.GT\ActivitiesCache.db \Device\HarddiskVolume3\Users\GT\AppData\Local\ConnectedDevicesPlatform\L.GT\ActivitiesCache.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\ConnectedDevicesPlatform\L.GT\ActivitiesCache.db-wal \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\KeyGuard \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CDP \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Mobility \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE398BB0D8A95C718720E4AAFC4E2C \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\CDP_CALLBACK_43C4B699-E8E2-C0E4-0937-4A2EC0681C50 \Sessions\2\BaseNamedObjects\CDP_CALLBACK_D30549DB-FA2F-8870-26F8-391437D7021D \Sessions\2\BaseNamedObjects\CDP_CALLBACK_E3D08E39-E9D8-0C9D-4C06-B4C41FE98F96 \Sessions\2\BaseNamedObjects\CDPUserSvc_Ready_db7a3b24-68b7-4c2e-8335-533dd99ee0f6_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects\SM0:6220:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:6220:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:6220:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:6220:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6220:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6220:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 6276: C:\Windows\System32\svchost.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE7EF713BBC13066ECA825957AD416 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:6276:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6276:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6276:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 6332: C:\Windows\System32\svchost.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{F35FACD2-8937-4638-89B1-51C9DC7C2B5B} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{9DFBAE9B-6964-47FF-A407-1B68C5654DBA} \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\NotificationController.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\QuietHours.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$$windows.data.notifications.quiethourssettings\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$microsoft.quiethoursprofile.unrestricted$windows.data.notifications.quiethoursprofile\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentemergency$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentfocus$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentfullscreen$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentgame$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentpostoobe$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentpresentation$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$quietmomentscheduled$windows.data.notifications.quietmoment\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\PushNotifications \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE2CF6EA07681D53E1947FE49B5486 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*cversions.3.ro \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000e.db \Sessions\2\BaseNamedObjects\SM0:6332:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:6332:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:6332:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:6332:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6332:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6332:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 6392: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:6392:120:WilError_03 \BaseNamedObjects\SM0:6392:120:WilError_03_p0 \BaseNamedObjects\SM0:6392:120:WilError_03_p0h \BaseNamedObjects\SM0:6392:304:WilStaging_02 \BaseNamedObjects\SM0:6392:304:WilStaging_02_p0 \BaseNamedObjects\SM0:6392:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\AllUsers\{821E2BB8-5A91-4663-8641-C991A4D6B023} \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings \RPC Control\OLEC75ACE2E8825A48292FF7D3BA866 \Windows\WindowStations\Service-0x0-3e7$ 6404: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\_Microsoft_EdgeUpdate_logging_mutex_C:ProgramDataMicrosoftEdgeUpdateLogMicrosoftEdgeUpdate.log \BaseNamedObjects\EdgeUpdate{09E661D0-A0CE-4051-BB50-E021BA16FBFC} \BaseNamedObjects\EdgeUpdate{E1CCA4D5-F56C-40AB-879F-7586DBEBF0D9} \BaseNamedObjects\SM0:6404:168:WilStaging_02 \BaseNamedObjects\SM0:6404:168:WilStaging_02_p0 \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\HarddiskVolume3\Program Files \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\1.3.207.5 \Device\HarddiskVolume3\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log \Device\HarddiskVolume3\Windows \Device\KsecDD \Device\NamedPipe\wkssvc \KernelObjects\MaximumCommitCondition \KnownDlls \KnownDlls32 \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \Windows\WindowStations\Service-0x0-3e7$ 6412: C:\Windows\System32\taskhostw.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\Beep \Device\CNG \Device\Harddisk0\DR0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\WebCache\V01.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\WebCacheLock.dat \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\ESENT.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\MsCtfMonitor.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\taskhostw.exe.mui \Device\KsecDD \KernelObjects\LowMemoryCondition \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\PlaySoundKRpc2 \RPC Control\webcache_{031b98cf-4a69-4c31-ab42-fd9b3c199407}_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\AccessibilitySoundAgentRunning \Sessions\2\BaseNamedObjects\SM0:6412:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:6412:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:6412:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:6412:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6412:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6412:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 6688: (ERROR: 5) 6752: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\RotHintTable \BaseNamedObjects\SM0:6752:120:WilError_03 \BaseNamedObjects\SM0:6752:120:WilError_03_p0 \BaseNamedObjects\SM0:6752:120:WilError_03_p0h \BaseNamedObjects\SM0:6752:304:WilStaging_02 \BaseNamedObjects\SM0:6752:304:WilStaging_02_p0 \BaseNamedObjects\SM0:6752:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\KeyGuard \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-19\Control Panel\International \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections \RPC Control\OLE41990CD25FAF703E44FB60EED6C3 \Windows\WindowStations\Service-0x0-3e5$ 6796: C:\Windows\explorer.exe \BaseNamedObjects\[CoreMessaging] 90c01713-6af2-475e-b277-ade61350ce8d \BaseNamedObjects\[CoreUI]-PID(6796)-TID(0) 5ee03ad7-c9ab-4296-9208-78723773b56c \BaseNamedObjects\[CoreUI]-PID(6796)-TID(10296) ea73c6f9-b54a-4a89-8fa3-8dcdd44e7103 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(11228) e195c840-5fc6-4e3c-8781-fb2919c9116d \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 0200d52c-7cae-4f27-affd-3ad8a6f1cb9a \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 0429fbcf-d9be-4b06-8fee-848a228f5ce0 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 14fb6d45-fc8c-4a90-beef-0281ad9bb12a \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 159c6fa6-7941-459a-b4f0-b98549505010 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 2684c038-3600-4a25-9840-a66ca03ed061 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 2efeb7b6-11e7-40bd-bce0-a01c15950c29 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 41636c43-c29e-4a1e-86e9-62b7d39d0f32 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 4492dd99-5788-45e4-978a-479659a9908c \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 47f6e094-0921-4792-9530-a3e75e94ecb8 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 5b59b3f4-ec9c-4b06-8544-b97b63a8f6ea \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 70e8ee5d-84fb-4321-8a36-16368aaf30d7 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 7375d274-59c6-462a-8432-9bff2bd50d91 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 737c6322-e3e3-4fd6-864a-03159e8048df \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 8a66c8bd-7c92-4124-b35e-a6b69e3122ee \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) 9627051c-930a-46e3-a732-d8201aa9cf61 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) a0578267-9950-4dd2-9abe-0bc24b8a9389 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) ac48639e-adf7-4c9e-8f58-05cfaa1b5609 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) c0ea5a80-4b8e-4202-866d-165e7c6b23c6 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) dcf56682-fe77-4b95-857d-4dc0fad58fa3 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) f5e5804a-b2e5-4424-a504-5697eb4c6800 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(2400) f89fd0c0-0d17-413a-9340-58eccc062789 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(6500) 2dda202a-6e57-439e-8482-2cf231c18ff4 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(6784) 93082723-ae9d-42d9-87ae-0e62a8feb148 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(6784) eb0e32fa-446f-4ec8-ab9a-63a68ad7336b \BaseNamedObjects\[CoreUI]-PID(6796)-TID(6784) fdb30985-6b5b-496c-949d-b8476cd268f2 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(6800) 42f85891-d97f-476a-80ef-e693b3534daf \BaseNamedObjects\[CoreUI]-PID(6796)-TID(6800) 736baa7c-5adf-4cdb-8fa9-592cbe023388 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(7224) 2e513430-5309-478b-b8f8-dff73b65a3d8 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(7224) 72c6e9b9-2e0c-4b45-8d79-ad2ada525324 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(7304) d5fddf68-2e2c-4b71-9814-aa6bc71cd3d8 \BaseNamedObjects\[CoreUI]-PID(6796)-TID(7308) 697fd2ba-8456-47f8-9d17-0269d22d65f4 \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_1280.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_16.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_1920.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_256.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_2560.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_32.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_48.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_768.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_96.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_custom_stream.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_exif.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!IconCacheInit \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterEvent \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterMutex \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_sr.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide_alternate.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1280.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_16.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1920.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_256.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_2560.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_32.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_48.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_768.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_96.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_custom_stream.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_exif.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterEvent \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterMutex \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!ThumbnailCacheInit \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_sr.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_wide.db!dfMaintainer \BaseNamedObjects\C::Users:GT:AppData:Local:Microsoft:Windows:Explorer:thumbcache_wide_alternate.db!dfMaintainer \BaseNamedObjects\CfProgressEvent \BaseNamedObjects\CoreMessagingRegistrar-6796:00000000-0000-0000-0000-000000000000 \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{E5A8F6E0-05AB-4D6C-80AE-3A41BF34C1DF} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{30E3E0B8-73E4-48CD-AB34-2CFBF604BD73} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{F7A066BC-2FE1-484E-A9BC-70F884D63F56} \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.624.1111.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\Start Menu \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\Start Menu\Programs \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\GameDVR \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\GameDVR\KnownGameList.bin \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Burn \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\GT\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned \Device\HarddiskVolume3\Users\GT\AppData\Roaming\Microsoft\Windows\Libraries \Device\HarddiskVolume3\Users\GT\AppData\Roaming\Microsoft\Windows\Network Shortcuts \Device\HarddiskVolume3\Users\GT\AppData\Roaming\Microsoft\Windows\Printer Shortcuts \Device\HarddiskVolume3\Users\GT\AppData\Roaming\Microsoft\Windows\Start Menu \Device\HarddiskVolume3\Users\GT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs \Device\HarddiskVolume3\Users\GT\Desktop \Device\HarddiskVolume3\Users\Public\Desktop \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\bcastdvr \Device\HarddiskVolume3\Windows\en-US\explorer.exe.mui \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\Fonts\StaticCache.dat \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\ApplicationFrame.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\bthprops.cpl.mui \Device\HarddiskVolume3\Windows\System32\en-US\d2d1.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\dsreg.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\ieframe.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\InputSwitch.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\mpr.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\NetworkIcon.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\ntshrui.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\oleaccrc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\sndvolsso.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\stobject.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Taskbar.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\twinui.pcshell.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.UI.FileExplorer.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winlangdb.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\zipfldr.dll.mui \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\en-US\Microsoft.ui.xaml.dll.mui \Device\HarddiskVolume3\Windows\SystemResources\imageres.dll.mun \Device\HarddiskVolume3\Windows\SystemResources\ntshrui.dll.mun \Device\HarddiskVolume3\Windows\SystemResources\shell32.dll.mun \Device\HarddiskVolume3\Windows\SystemResources\SndVolSSO.dll.mun \Device\HarddiskVolume3\Windows\SystemResources\stobject.dll.mun \Device\HarddiskVolume3\Windows\SystemResources\Winlangdb.dll.mun \Device\HarddiskVolume3\Windows\SystemResources\zipfldr.dll.mun \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc \Device\KsecDD \Device\NamedPipe\srvsvc \Device\NamedPipe\wkssvc \Device\Nsi \Device\WMIDataDevice \FileSystem\Filters\FltMgrMsg \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{041B7901-77F7-4430-A4D2-C9A528B57F9E} \REGISTRY\A\{126D90CB-7758-402D-9C95-71711FCC7477} \REGISTRY\A\{17CEFF99-5083-469C-911F-CDA14BAC4116} \REGISTRY\A\{36F0C5F2-2E99-43EB-A9D0-6E15FAA372B0} \REGISTRY\A\{68874F14-3768-4E99-9FF1-4D80623C6C1C} \REGISTRY\A\{6EB89E56-C812-479D-9790-3A2F836849EE} \REGISTRY\A\{7F00DA51-1034-4994-B43B-1132D41115E6} \REGISTRY\A\{905AA830-78EF-45E5-A15D-67DBF467BC7B} \REGISTRY\A\{C92323A9-1FF0-4CBD-96BF-9E8564585C9E} \REGISTRY\A\{D3C116A9-B0B6-4AC3-8E7F-FE30A0DD5A1B} \REGISTRY\A\{EBCFBD69-2B3E-4619-9100-ED948E1437D0} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Classes\.exe \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance \REGISTRY\MACHINE\SOFTWARE\Classes\exefile \REGISTRY\MACHINE\SOFTWARE\Classes\Kind.program \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\AppExtension\windowsudk.storage.registerschema\S-1-5-21-940397446-1893263122-1169132827-1001\{13726D08-7031-4B9B-BC90-713ACEB67294} \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-940397446-1893263122-1169132827-1001\{7321C3BC-EAA0-4B0D-8541-A70E9A241350} \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-940397446-1893263122-1169132827-1001\{7B9480FA-E3AF-4D2D-854E-8B499EDE4082} \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\Package \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.exe \REGISTRY\MACHINE\SOFTWARE\Microsoft\IdentityStore\Providers \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\KGL\OneSettings \REGISTRY\MACHINE\SOFTWARE\Microsoft\MSF\Registration\Listen \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\PlayToReceiver \REGISTRY\MACHINE\SOFTWARE\Microsoft\TabletTip\1.7 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\CrawlScopeManager\Windows\SystemIndex\SearchRoots \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\Shell \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\WOW6432Node \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkUxManager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\Software\Microsoft\TIP\TestResults \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Desktop \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Keyboard \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\NotifyIconSettings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\NotifyIconSettings\5944361051192638133 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\NotifyIconSettings\8823086467106310012 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\TimeDate\AdditionalClocks \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\UnsupportedHardwareNotificationCache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\appdatalow\software\microsoft\ime\15.0\IMEJP\MSIME \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\GameBar \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\IME\15.0\IMETC \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\input\Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\input\TIPC \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\InputMethod\CandidateWindow\CHS\1 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\InputMethod\CandidateWindow\CHS\2 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\InputMethod\Settings\CHS \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\InputMethod\Settings\CHT \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\MSF\Registration\Listen \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\StigRegKey\Typing\DesktopNearCaretKeyboardEnabled \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\TabletTip\1.7 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Touchpad \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\default$windows.data.bluelightreduction.bluelightreductionstate\windows.data.bluelightreduction.bluelightreductionstate \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\default$windows.data.bluelightreduction.settings\windows.data.bluelightreduction.settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\default$windows.data.bluelightreduction.bluelightreductionstate\windows.data.bluelightreduction.bluelightreductionstate \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\default$windows.data.bluelightreduction.settings\windows.data.bluelightreduction.settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ApplicationViewManagement \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ImmersiveShell\PersistedApplicationData\Volatile \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\ModeTriggerCachedKey \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\TaskGroups \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\2\VirtualDesktops \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{9E04CAB2-CC14-11DF-BB8C-A2F1DED72085}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{A3D53349-6E61-4557-8FC7-0028EDCEEBF6}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{B267E3AD-A825-4A09-82B9-EEC22AA3B847}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{BCB48336-4DDD-48FF-BB0B-D3190DACB3E2}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CAA59E3C-4792-41A5-9909-6A6A8D32490E}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F2A1CB5A-E3CC-4A2E-AF9D-505A7009D442}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{FA99DFC7-6AC2-453A-A5E2-5E2AFF4507BD}\Count \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\VirtualDesktops \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\GameDVR \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\PenWorkspace \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Search \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\Shell \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\Shell\Associations\UrlAssociations \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\Shell\Bags\1\Desktop \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\* \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\PackagedCom \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\PackagedCom\Package \RPC Control\OLE5AA20D37DDB8D53D4ED3C2C65BA4 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\00006796_LiftedCompObj_0000000000003074 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:100ec \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:100fa \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:100fe \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10124 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10178 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:1017a \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:1017c \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:1017e \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10180 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10182 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10184 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10186 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10188 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10210 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:10228 \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:1022a \Sessions\2\BaseNamedObjects\1a8cHWNDInterface:3004a \Sessions\2\BaseNamedObjects\_!SHMSFTHISTORY!_ \Sessions\2\BaseNamedObjects\_SHuassist.mtx \Sessions\2\BaseNamedObjects\AllShellUIHostsReadyEvent \Sessions\2\BaseNamedObjects\AnimatedFacadePropertyChangesComplete.6796.11228 \Sessions\2\BaseNamedObjects\AnimatedFacadePropertyChangesComplete.6796.6784 \Sessions\2\BaseNamedObjects\AnimatedFacadePropertyChangesComplete.6796.6800 \Sessions\2\BaseNamedObjects\AnimationsComplete.6796.11228 \Sessions\2\BaseNamedObjects\AnimationsComplete.6796.6784 \Sessions\2\BaseNamedObjects\AnimationsComplete.6796.6800 \Sessions\2\BaseNamedObjects\BcastdvrStartup73BD1D72-A850-47FF-82E1-8F30D2C38FFE \Sessions\2\BaseNamedObjects\BrushTransitionsComplete.6796.11228 \Sessions\2\BaseNamedObjects\BrushTransitionsComplete.6796.6784 \Sessions\2\BaseNamedObjects\BrushTransitionsComplete.6796.6800 \Sessions\2\BaseNamedObjects\BuildTreeServiceDrained.6796.11228 \Sessions\2\BaseNamedObjects\BuildTreeServiceDrained.6796.6784 \Sessions\2\BaseNamedObjects\BuildTreeServiceDrained.6796.6800 \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*cversions.3.ro \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000e.db \Sessions\2\BaseNamedObjects\CDP_CALLBACK_43C4B699-E8E2-C0E4-0937-4A2EC0681C50 \Sessions\2\BaseNamedObjects\CDP_CALLBACK_D30549DB-FA2F-8870-26F8-391437D7021D \Sessions\2\BaseNamedObjects\CDP_CALLBACK_E3D08E39-E9D8-0C9D-4C06-B4C41FE98F96 \Sessions\2\BaseNamedObjects\DeferredAnimationOperationsComplete.6796.11228 \Sessions\2\BaseNamedObjects\DeferredAnimationOperationsComplete.6796.6784 \Sessions\2\BaseNamedObjects\DeferredAnimationOperationsComplete.6796.6800 \Sessions\2\BaseNamedObjects\FacadeAnimationsComplete.6796.11228 \Sessions\2\BaseNamedObjects\FacadeAnimationsComplete.6796.6784 \Sessions\2\BaseNamedObjects\FacadeAnimationsComplete.6796.6800 \Sessions\2\BaseNamedObjects\FontDownloadsIdle.6796.11228 \Sessions\2\BaseNamedObjects\FontDownloadsIdle.6796.6784 \Sessions\2\BaseNamedObjects\FontDownloadsIdle.6796.6800 \Sessions\2\BaseNamedObjects\HasAnimations.6796.11228 \Sessions\2\BaseNamedObjects\HasAnimations.6796.6784 \Sessions\2\BaseNamedObjects\HasAnimations.6796.6800 \Sessions\2\BaseNamedObjects\HasBrushTransitions.6796.11228 \Sessions\2\BaseNamedObjects\HasBrushTransitions.6796.6784 \Sessions\2\BaseNamedObjects\HasBrushTransitions.6796.6800 \Sessions\2\BaseNamedObjects\HasBuildTreeWorks.6796.11228 \Sessions\2\BaseNamedObjects\HasBuildTreeWorks.6796.6784 \Sessions\2\BaseNamedObjects\HasBuildTreeWorks.6796.6800 \Sessions\2\BaseNamedObjects\HasDeferredAnimationOperations.6796.11228 \Sessions\2\BaseNamedObjects\HasDeferredAnimationOperations.6796.6784 \Sessions\2\BaseNamedObjects\HasDeferredAnimationOperations.6796.6800 \Sessions\2\BaseNamedObjects\HasFacadeAnimations.6796.11228 \Sessions\2\BaseNamedObjects\HasFacadeAnimations.6796.6784 \Sessions\2\BaseNamedObjects\HasFacadeAnimations.6796.6800 \Sessions\2\BaseNamedObjects\ImageDecodingIdle.6796.11228 \Sessions\2\BaseNamedObjects\ImageDecodingIdle.6796.6784 \Sessions\2\BaseNamedObjects\ImageDecodingIdle.6796.6800 \Sessions\2\BaseNamedObjects\ImplicitShowHideComplete.6796.11228 \Sessions\2\BaseNamedObjects\ImplicitShowHideComplete.6796.6784 \Sessions\2\BaseNamedObjects\ImplicitShowHideComplete.6796.6800 \Sessions\2\BaseNamedObjects\KeyboardInputReceived.6796.11228 \Sessions\2\BaseNamedObjects\KeyboardInputReceived.6796.6784 \Sessions\2\BaseNamedObjects\KeyboardInputReceived.6796.6800 \Sessions\2\BaseNamedObjects\PageNavigationComplete.6796.11228 \Sessions\2\BaseNamedObjects\PageNavigationComplete.6796.6784 \Sessions\2\BaseNamedObjects\PageNavigationComplete.6796.6800 \Sessions\2\BaseNamedObjects\PointerInputReceived.6796.11228 \Sessions\2\BaseNamedObjects\PointerInputReceived.6796.6800 \Sessions\2\BaseNamedObjects\PopupMenuCommandInvoked.6796.11228 \Sessions\2\BaseNamedObjects\PopupMenuCommandInvoked.6796.6784 \Sessions\2\BaseNamedObjects\PopupMenuCommandInvoked.6796.6800 \Sessions\2\BaseNamedObjects\RootVisualReset.6796.11228 \Sessions\2\BaseNamedObjects\RootVisualReset.6796.6784 \Sessions\2\BaseNamedObjects\RootVisualReset.6796.6800 \Sessions\2\BaseNamedObjects\SessionImmersiveColorMutex \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\2\BaseNamedObjects\ShellDesktopSwitchEvent \Sessions\2\BaseNamedObjects\ShellLauncherLoginEvent \Sessions\2\BaseNamedObjects\ShellReadyEvent \Sessions\2\BaseNamedObjects\ShellStartReadyEvent \Sessions\2\BaseNamedObjects\SM0:6796:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:6796:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:6796:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:6796:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6796:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6796:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\TaskbarCreated \Sessions\2\BaseNamedObjects\UrlZonesSM_GT \Sessions\2\BaseNamedObjects\windows_ie_global_counters \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects\WinUIDebuggable6796 \Sessions\2\BaseNamedObjects\ZonesCacheCounterMutex \Sessions\2\BaseNamedObjects\ZonesLockedCacheCounterMutex \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 6860: C:\Windows\System32\ShellHost.exe \BaseNamedObjects\[CoreUI]-PID(6860)-TID(6904) d24c202a-2602-4708-b707-2951be61133e \BaseNamedObjects\[CoreUI]-PID(6860)-TID(6936) 0201e92d-dc85-4247-a792-75ae8bcdbdf2 \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{D3C116A9-B0B6-4AC3-8E7F-FE30A0DD5A1B} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLEDD7EC90582F11A8E21E5CF57D06E \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\1accHWNDInterface:100e0 \Sessions\2\BaseNamedObjects\AnimatedFacadePropertyChangesComplete.6860.6904 \Sessions\2\BaseNamedObjects\AnimationsComplete.6860.6904 \Sessions\2\BaseNamedObjects\BrushTransitionsComplete.6860.6904 \Sessions\2\BaseNamedObjects\BuildTreeServiceDrained.6860.6904 \Sessions\2\BaseNamedObjects\DeferredAnimationOperationsComplete.6860.6904 \Sessions\2\BaseNamedObjects\FacadeAnimationsComplete.6860.6904 \Sessions\2\BaseNamedObjects\FontDownloadsIdle.6860.6904 \Sessions\2\BaseNamedObjects\HasAnimations.6860.6904 \Sessions\2\BaseNamedObjects\HasBrushTransitions.6860.6904 \Sessions\2\BaseNamedObjects\HasBuildTreeWorks.6860.6904 \Sessions\2\BaseNamedObjects\HasDeferredAnimationOperations.6860.6904 \Sessions\2\BaseNamedObjects\HasFacadeAnimations.6860.6904 \Sessions\2\BaseNamedObjects\ImageDecodingIdle.6860.6904 \Sessions\2\BaseNamedObjects\ImplicitShowHideComplete.6860.6904 \Sessions\2\BaseNamedObjects\KeyboardInputReceived.6860.6904 \Sessions\2\BaseNamedObjects\PageNavigationComplete.6860.6904 \Sessions\2\BaseNamedObjects\PopupMenuCommandInvoked.6860.6904 \Sessions\2\BaseNamedObjects\RootVisualReset.6860.6904 \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\2\BaseNamedObjects\ShellHostMutex \Sessions\2\BaseNamedObjects\SM0:6860:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:6860:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:6860:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:6860:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6860:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6860:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 7096: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:7096:304:WilStaging_02 \BaseNamedObjects\SM0:7096:304:WilStaging_02_p0 \BaseNamedObjects\SM0:7096:304:WilStaging_02_p0h \Container_MicrosoftWindows.Client.CBS_1000.26100.197.0_x64__cw5n1h2txyewy-S-1-5-21-940397446-1893263122-1169132827-1001 \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \RPC Control\LRPC-619dd71963d0063ea5 \RPC Control\OLE7D5770CE4AF86BDDC734EAE918EA \Windows\WindowStations\Service-0x0-3e7$ 7116: C:\Windows\System32\SppExtComObj.Exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:7116:304:WilStaging_02 \BaseNamedObjects\SM0:7116:304:WilStaging_02_p0 \BaseNamedObjects\SM0:7116:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\activeds.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\KsecDD \Device\Nsi \Device\PcwDrv \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ProgIdIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\USER\S-1-5-20 \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows NT\CurrentVersion \RPC Control\OLE94B470C1119C693B569DA3ED746A \Windows\WindowStations\Service-0x0-3e4$ 6156: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe \BaseNamedObjects\[CoreUI]-PID(6156)-TID(6152) 1200dc5c-4527-42f3-a270-6d2db45a921d \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\CoreMessagingRegistrar-6156:00000000-0000-0000-0000-000000000000 \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe\en-US\Microsoft.ui.xaml.dll.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{041B7901-77F7-4430-A4D2-C9A528B57F9E} \REGISTRY\A\{126D90CB-7758-402D-9C95-71711FCC7477} \REGISTRY\A\{17CEFF99-5083-469C-911F-CDA14BAC4116} \REGISTRY\A\{36F0C5F2-2E99-43EB-A9D0-6E15FAA372B0} \REGISTRY\A\{68874F14-3768-4E99-9FF1-4D80623C6C1C} \REGISTRY\A\{6EB89E56-C812-479D-9790-3A2F836849EE} \REGISTRY\A\{7F00DA51-1034-4994-B43B-1132D41115E6} \REGISTRY\A\{905AA830-78EF-45E5-A15D-67DBF467BC7B} \REGISTRY\A\{C92323A9-1FF0-4CBD-96BF-9E8564585C9E} \REGISTRY\A\{EBCFBD69-2B3E-4619-9100-ED948E1437D0} \REGISTRY\MACHINE \REGISTRY\MACHINE\Software\Classes\ActivatableClasses \REGISTRY\MACHINE\Software\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\Software\Classes\PackagedCom \REGISTRY\MACHINE\Software\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\Software\Microsoft\Ole \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLED2F397720A9B39AAACC7B0EDDCA9 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\AnimatedFacadePropertyChangesComplete.6156.6152 \Sessions\2\BaseNamedObjects\AnimationsComplete.6156.6152 \Sessions\2\BaseNamedObjects\BrushTransitionsComplete.6156.6152 \Sessions\2\BaseNamedObjects\BuildTreeServiceDrained.6156.6152 \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\DeferredAnimationOperationsComplete.6156.6152 \Sessions\2\BaseNamedObjects\e4728648-1e0c-4c13-bf83-2925db412d19 \Sessions\2\BaseNamedObjects\FacadeAnimationsComplete.6156.6152 \Sessions\2\BaseNamedObjects\FontDownloadsIdle.6156.6152 \Sessions\2\BaseNamedObjects\HasAnimations.6156.6152 \Sessions\2\BaseNamedObjects\HasBrushTransitions.6156.6152 \Sessions\2\BaseNamedObjects\HasBuildTreeWorks.6156.6152 \Sessions\2\BaseNamedObjects\HasDeferredAnimationOperations.6156.6152 \Sessions\2\BaseNamedObjects\HasFacadeAnimations.6156.6152 \Sessions\2\BaseNamedObjects\ImageDecodingIdle.6156.6152 \Sessions\2\BaseNamedObjects\ImplicitShowHideComplete.6156.6152 \Sessions\2\BaseNamedObjects\KeyboardInputReceived.6156.6152 \Sessions\2\BaseNamedObjects\PageNavigationComplete.6156.6152 \Sessions\2\BaseNamedObjects\PointerInputReceived.6156.6152 \Sessions\2\BaseNamedObjects\PopupMenuCommandInvoked.6156.6152 \Sessions\2\BaseNamedObjects\RootVisualReset.6156.6152 \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\2\BaseNamedObjects\SM0:6156:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:6156:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:6156:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:6156:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6156:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6156:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\BaseNamedObjects\WinUIDebuggable6156 \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 6968: C:\Windows\System32\svchost.exe \BaseNamedObjects\[CoreUI]-PID(6968)-TID(11180) 92dfe3a5-13d4-4cdc-8452-97f192633f69 \BaseNamedObjects\[CoreUI]-PID(6968)-TID(7248) 06dcadbd-f9b5-42aa-b461-4569963499c9 \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\ole32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Clipboard \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLEF3D9833AD607DB22DC4A738EB440 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:6968:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:6968:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:6968:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 7236: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\_Microsoft_EdgeUpdate_logging_mutex_C:ProgramDataMicrosoftEdgeUpdateLogMicrosoftEdgeUpdate.log \BaseNamedObjects\EdgeUpdate{8061D004-DAFE-413C-AEF6-A3D067FFA5D8} \BaseNamedObjects\SM0:7236:168:WilStaging_02 \BaseNamedObjects\SM0:7236:168:WilStaging_02_p0 \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\1.3.207.5 \Device\HarddiskVolume3\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log \Device\HarddiskVolume3\Windows \Device\KsecDD \Device\NamedPipe\wkssvc \KernelObjects\MaximumCommitCondition \KnownDlls \KnownDlls32 \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \Windows\WindowStations\Service-0x0-3e7$ 7544: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{19D0E4AD-655E-42B3-BAE2-8E8A48E3685C} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{F937CEAD-B50D-4C26-84A9-63B056B2F511} \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Data.bin \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Header.bin \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\SegoeIcons.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\netmsg.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Globalization.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\wininet.dll.mui \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenu\index.windows.bundle \Device\HarddiskVolume3\Windows\SystemResources\wininet.dll.mun \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a \Device\KsecDD \Device\Nsi \KnownDlls \REGISTRY\A\{041B7901-77F7-4430-A4D2-C9A528B57F9E} \REGISTRY\A\{126D90CB-7758-402D-9C95-71711FCC7477} \REGISTRY\A\{17CEFF99-5083-469C-911F-CDA14BAC4116} \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7} \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7}\LocalState \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7}\LocalState\BlockedFileSuggestions \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7}\LocalState\BlockedOffice365FilesContainer \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7}\LocalState\IrisProviderBookkeepingData \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7}\LocalState\knownIrisCreatives \REGISTRY\A\{1f6b49a2-79dd-f199-1e96-afb36ff509f7}\LocalState\SuggestedFilesSetting \REGISTRY\A\{68874F14-3768-4E99-9FF1-4D80623C6C1C} \REGISTRY\A\{6EB89E56-C812-479D-9790-3A2F836849EE} \REGISTRY\A\{7F00DA51-1034-4994-B43B-1132D41115E6} \REGISTRY\A\{905AA830-78EF-45E5-A15D-67DBF467BC7B} \REGISTRY\A\{BF0B54C0-DB77-486D-AD0F-8E6462A56485} \REGISTRY\A\{C92323A9-1FF0-4CBD-96BF-9E8564585C9E} \REGISTRY\A\{D3C116A9-B0B6-4AC3-8E7F-FE30A0DD5A1B} \REGISTRY\A\{EBCFBD69-2B3E-4619-9100-ED948E1437D0} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSX\WSXPacks \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload \REGISTRY\MACHINE\SOFTWARE\WOW6432Node \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Accessibility \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\Geo \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\User Profile \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.placeholdertilecollection\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.placeholdertilecollectionlocal\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.localstartglobalproperties\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.localstarttilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.roamedtilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.startglobalproperties\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Start \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Start\Migrations \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\WSX\WSXPacks \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\WSX\WSXSessions\2|1999552854515173492|StartMenuExperienceHost.exe \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Extensible Cache \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\1d78HWNDInterface:101bc \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\[CoreUI]-PID(7544)-TID(7616) 1b44c8f5-05d2-487c-a6ed-3780b64b2ffe \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\[CoreUI]-PID(7544)-TID(7616) 1cab5a16-1ea7-4c8d-a06a-0a10a310714d \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\[CoreUI]-PID(7544)-TID(7616) bb1d9acc-f0c3-4048-be89-de871f2cf9ac \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\AnimatedFacadePropertyChangesComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\AnimationsComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\ApplicationService:1d781dc637faa769acf \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\BrushTransitionsComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\BuildTreeServiceDrained.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\DBWinMutex \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\DeferredAnimationOperationsComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\FacadeAnimationsComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\FontDownloadsIdle.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\HasAnimations.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\HasBrushTransitions.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\HasBuildTreeWorks.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\HasDeferredAnimationOperations.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\HasFacadeAnimations.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\ImageDecodingIdle.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\ImplicitShowHideComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\KeyboardInputReceived.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\PageNavigationComplete.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\PopupMenuCommandInvoked.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\RootVisualReset.7544.7616 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\RPC Control\OLE6AB6044B36434C79013F32985600 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\SM0:7544:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\SM0:7544:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\SM0:7544:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\SM0:7544:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\SM0:7544:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\SM0:7544:304:WilStaging_02_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\UrlZonesSM_GT \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\windows_shell_global_counters \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\windows_webcache_counters_{00000000-5d8e-4eed-b3fa-e30684411323} \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\ZonesCacheCounterMutex \Sessions\2\AppContainerNamedObjects\S-1-15-2-515815643-2845804217-1874292103-218650560-777617685-4287762684-137415000\ZonesLockedCacheCounterMutex \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*cversions.3.ro \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000e.db \Sessions\2\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 7536: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\StateRepository.PrimaryTileUserNotificationChannel.{D96521B5-5EC7-4C5A-A13C-4BF68E23D445} \BaseNamedObjects\StateRepository.SecondaryTileUserNotificationChannel.{43D3F9E5-CAB3-4509-A49A-F6DC4589E63D} \Default \Device\CNG \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-wal \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\calibri.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\netmsg.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.applicationmodel.datatransfer.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Web.dll.mui \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Foundation.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.winmd \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd \Device\HarddiskVolume3\Windows\SystemResources\wininet.dll.mun \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a \Device\KsecDD \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.7536.8496.3940438119988388548 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.10442630356120497420 \Device\Nsi \KnownDlls \REGISTRY\A\{041B7901-77F7-4430-A4D2-C9A528B57F9E} \REGISTRY\A\{126D90CB-7758-402D-9C95-71711FCC7477} \REGISTRY\A\{17CEFF99-5083-469C-911F-CDA14BAC4116} \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5} \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState\AppIndexer \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState\Configuration \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState\Search\PersistentStorage \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState\SearchFeatures \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState\VersionInfo \REGISTRY\A\{3aae5301-e9a1-5a9a-8912-0bf3507df2d5}\LocalState\WebViewVersionInfo \REGISTRY\A\{68874F14-3768-4E99-9FF1-4D80623C6C1C} \REGISTRY\A\{6EB89E56-C812-479D-9790-3A2F836849EE} \REGISTRY\A\{7F00DA51-1034-4994-B43B-1132D41115E6} \REGISTRY\A\{905AA830-78EF-45E5-A15D-67DBF467BC7B} \REGISTRY\A\{C92323A9-1FF0-4CBD-96BF-9E8564585C9E} \REGISTRY\A\{D3C116A9-B0B6-4AC3-8E7F-FE30A0DD5A1B} \REGISTRY\A\{EBCFBD69-2B3E-4619-9100-ED948E1437D0} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload \REGISTRY\MACHINE\SOFTWARE\WOW6432Node \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\Geo \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\User Profile \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.placeholdertilecollection\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.placeholdertilecollectionlocal\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.localstarttilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${2a695155-a8e6-4031-89b6-61acb9be7a9a}$$windows.data.unifiedtile.roamedtilepropertiesmap\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\SearchSettings\Appearance\Current \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Start\Migrations \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Extensible Cache \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\1d70HWNDInterface:401c2 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\[CoreUI]-PID(7536)-TID(7648) 035b6d2c-25d2-426b-af7c-7c130556dabe \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\[CoreUI]-PID(7536)-TID(7648) 56749641-6b13-4772-b452-869933a58d50 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\[CoreUI]-PID(7536)-TID(7648) 93d06a90-423e-427c-b3e4-a6a000181a64 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\AnimatedFacadePropertyChangesComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\AnimationsComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\ApplicationService:1d701dc637faa768027 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\BrushTransitionsComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\BuildTreeServiceDrained.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000e.db \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\DeferredAnimationOperationsComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\FacadeAnimationsComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\FontDownloadsIdle.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\HasAnimations.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\HasBrushTransitions.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\HasBuildTreeWorks.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\HasDeferredAnimationOperations.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\HasFacadeAnimations.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\ImageDecodingIdle.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\ImplicitShowHideComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\KeyboardInputReceived.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\PageNavigationComplete.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\PopupMenuCommandInvoked.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\RootVisualReset.7536.7648 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\RPC Control\OLE6B73CB3FF43926D3EFA5454FAE14 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:7536:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:7536:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:7536:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:7536:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:7536:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:7536:304:WilStaging_02_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\UrlZonesSM_GT \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\windows_shell_global_counters \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\windows_webcache_counters_{00000000-5d8e-4eed-b3fa-e30684411323} \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\ZonesCacheCounterMutex \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\ZonesLockedCacheCounterMutex \Sessions\2\BaseNamedObjects\C:*Users*GT*AppData*Local*Microsoft*Windows*Caches*cversions.3.ro \Sessions\2\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 7640: C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.28301.40.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{EDF8EB33-8167-4995-B14D-3650F98824E9} \REGISTRY\MACHINE \REGISTRY\MACHINE\Software\Classes\ActivatableClasses \REGISTRY\MACHINE\Software\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-940397446-1893263122-1169132827-1001\{26A02A4C-07EA-411B-8272-B1EFE2CF383C} \REGISTRY\MACHINE\Software\Classes\PackagedCom \REGISTRY\MACHINE\Software\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\Software\Classes\PackagedCom\Package \REGISTRY\MACHINE\Software\Microsoft\Ole \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \Registry\User\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \Registry\User\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \Registry\User\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\PackagedCom \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\PackagedCom\Package \RPC Control\OLEA9DD5F13E96C2599BD5F1CEABADF \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:7640:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:7640:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:7640:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:7640:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:7640:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:7640:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windowApiReady \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 7740: C:\Windows\System32\RuntimeBroker.exe \BaseNamedObjects\[CoreUI]-PID(7740)-TID(8272) a5f32b79-aaf2-4fcf-8b79-e6783bb70c9b \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Foundation.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.winmd \Device\KsecDD \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{041B7901-77F7-4430-A4D2-C9A528B57F9E} \REGISTRY\A\{68874F14-3768-4E99-9FF1-4D80623C6C1C} \REGISTRY\A\{7F00DA51-1034-4994-B43B-1132D41115E6} \REGISTRY\A\{C92323A9-1FF0-4CBD-96BF-9E8564585C9E} \REGISTRY\A\{EBCFBD69-2B3E-4619-9100-ED948E1437D0} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-940397446-1893263122-1169132827-1001\{AC6AD39B-8A73-44BB-ADCA-8B26E03B8C70} \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-940397446-1893263122-1169132827-1001\{D8C74435-9432-4507-9616-2DA3C5FC7707} \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSX\WSXPacks \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkUxManager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Terminal Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\input\EC \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Holographic \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Lock Screen \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Mobility \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\WSX\WSXPacks \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\RemoteSystemIntegration \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE17A429E1E02C62DD1334248C9861 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\SM0:7740:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:7740:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:7740:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:7740:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:7740:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:7740:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 7764: C:\Windows\System32\svchost.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Foundation.winmd \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\A\{17CEFF99-5083-469C-911F-CDA14BAC4116} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\InterfaceIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE239F8DFAE8C8A8859A95B7463701 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\SM0:7764:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:7764:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:7764:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:7764:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:7764:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:7764:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 7840: C:\Windows\System32\RuntimeBroker.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Web.dll.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-940397446-1893263122-1169132827-1001\{311DC635-EEEE-411C-85A4-7D694492A1F8} \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE0FAC56A8D0B46550A48B1EC80635 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\SM0:7840:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:7840:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:7840:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:7840:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:7840:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:7840:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 6956: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:6956:120:WilError_03 \BaseNamedObjects\SM0:6956:120:WilError_03_p0 \BaseNamedObjects\SM0:6956:120:WilError_03_p0h \BaseNamedObjects\SM0:6956:304:WilStaging_02 \BaseNamedObjects\SM0:6956:304:WilStaging_02_p0 \BaseNamedObjects\SM0:6956:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \RPC Control\LicenseServiceEndpoint \RPC Control\OLEBB6E82ADC9868E15A70488ECC814 \Windows\WindowStations\Service-0x0-3e5$ 7916: C:\Windows\System32\backgroundTaskHost.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.23101.22.0_x64__cw5n1h2txyewy \KnownDlls \REGISTRY\A\{CA2F90B3-502C-4282-BA4A-175CA2895B52} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\Geo \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\User Profile \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.crossdevice_cw5n1h2txyewy\ResourcesConfig \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\ApplicationService:1eec1dc637faae12a57 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\RPC Control\OLE3A3BA994616C79C70169AB403712 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\SM0:7916:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\SM0:7916:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\SM0:7916:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\SM0:7916:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\SM0:7916:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\SM0:7916:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 8160: C:\Windows\System32\backgroundTaskHost.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.YourPhone_0.24012.105.0_x64__8wekyb3d8bbwe \KnownDlls \REGISTRY\A\{CBAF1830-A3E9-4CF4-8D4D-66B57432B95F} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\Geo \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\User Profile \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.yourphone_8wekyb3d8bbwe\ResourcesConfig \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\ApplicationService:1fe01dc637faae19049 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\RPC Control\OLEE5475626B1A885B3E81432F9A355 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\SM0:8160:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\SM0:8160:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\SM0:8160:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\SM0:8160:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\SM0:8160:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\SM0:8160:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 8224: (ERROR: 5) 8532: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Locales\en-US.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_100_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_200_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\resources.pak \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\BrowserMetrics\BrowserMetrics-6908CDE3-1CE8.pma \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\BrowserMetrics\BrowserMetrics-692ECED9-2154.pma \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\CrashpadMetrics-active.pma \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsSiteData \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeEDrop\EdgeEDropSQLite.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys\EdgeJourneys.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys\EdgeJourneys.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityEdge \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\heavy_ad_intervention_opt_out.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History-journal \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_searchapp.bundleassets.example_0.indexeddb.leveldb\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_searchapp.bundleassets.example_0.indexeddb.leveldb\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_searchapp.bundleassets.example_0.indexeddb.leveldb\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_searchapp.bundleassets.example_0.indexeddb.leveldb\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data For Account \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network Action Predictor \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ServerCertificate \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\LOCK \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Vpn Tokens \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager-journal \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\lockfile \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Subresource Filter\Indexed Rules\37\10.34.0.81\Ruleset Data \Device\HarddiskVolume3\Windows\Fonts \Device\HarddiskVolume3\Windows\Fonts\malgun.ttf \Device\HarddiskVolume3\Windows\Fonts\msgothic.ttc \Device\HarddiskVolume3\Windows\Fonts\msjh.ttc \Device\HarddiskVolume3\Windows\Fonts\msyh.ttc \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeuib.ttf \Device\HarddiskVolume3\Windows\Fonts\seguisb.ttf \Device\HarddiskVolume3\Windows\Fonts\simsun.ttc \Device\HarddiskVolume3\Windows\Fonts\YuGothR.ttc \Device\HarddiskVolume3\Windows\System32\drivers\etc \Device\HarddiskVolume3\Windows\System32\en-US\kernel32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.4484_none_87ef4f277a2c8b1a \Device\KsecDD \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.7536.8496.3940438119988388548 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.12244260525269883252 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.14019793522717897277 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.16234807570202739516 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.5486870019090274425 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.6459581581635443283 \Device\Nsi \KernelObjects\LowMemoryCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\KeyGuard \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\PriorityControl \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Cursors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\EUDC \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\AppHost \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\DWM \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\2154HWNDInterface:3025c \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\DBWinMutex \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\Global\windows_shell_global_counters \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\RPC Control\OLE7B37F96D0D19874E6AF6B1FE97E3 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8532:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8532:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8532:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8532:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8532:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8532:304:WilStaging_02_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\windows_shell_global_counters \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 8564: C:\Windows\System32\ctfmon.exe \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8568) 4d05044f-5010-41fe-affa-ddfa14dd49bb \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) 1a81661e-fa7f-433b-b060-e7e1a9d353c4 \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) 4ab51137-ef72-4041-821f-35aecef3880e \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) 5c8b24d6-e047-4c2e-8a53-2c463f98bb70 \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) 6c3797db-c719-4d92-8221-8dae5e40c077 \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) 71d72490-94dc-4c35-aaf6-e43167f02eb0 \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) aebfedb1-a6c2-44fc-b33d-c8810ff4edef \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) c74cb1b0-9b1c-4f47-b4c7-b7138872644a \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8624) e82e8373-b111-4587-9b29-7fa6b8d0a98d \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8628) 1337fc9d-7d07-4d0b-abab-b82342fc274c \BaseNamedObjects\[CoreUI]-PID(8564)-TID(8736) d226ab9f-72f2-4e61-be34-4f517ed18fb3 \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\msctf.serverDefault2 \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\ctfmon.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\datamap.0409.dat \Device\KsecDD \Device\NamedPipe\TSVCPIPE-6b3140ee-a850-4de6-8bcb-31ce25f84310 \Device\NamedPipe\TSVCPIPE-8c67c6a2-bb08-4d89-8274-dc100ae0b0ca \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\CTF\TIP \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\Input\Break \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Input Method\Hot Keys \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Keyboard Layout \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Keyboard Layout\Preload \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Keyboard Layout\Toggle \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\CTF\Assemblies \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\CTF\DirectSwitchHotkeys \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\CTF\SortOrder \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\CTF\TIP \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Lighting \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Spelling \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Spelling\Options \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\Pen\PLOC\Settings \RPC Control\OLEAF171B638D26113CC5EAB6018423 \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\CicLoadWinStaWinSta0 \Sessions\2\BaseNamedObjects\CTF.AsmListCache.FMPDefault2 \Sessions\2\BaseNamedObjects\IshShutdown00002174 \Sessions\2\BaseNamedObjects\MSCTF.Asm.MutexDefault2 \Sessions\2\BaseNamedObjects\MSCTF.CtfActivated.Default2S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects\MSCTF.CtfDeactivated.Default2S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects\MSCTF.CtfMonitorInitialized.Default2S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault2 \Sessions\2\BaseNamedObjects\MSCTF.CtfServerMutexDefault2 \Sessions\2\BaseNamedObjects\SM0:8564:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:8564:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:8564:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:8564:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:8564:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:8564:304:WilStaging_02_p0h \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 8608: C:\Windows\System32\taskhostw.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:8608:120:WilError_03 \BaseNamedObjects\SM0:8608:120:WilError_03_p0 \BaseNamedObjects\SM0:8608:120:WilError_03_p0h \BaseNamedObjects\SM0:8608:304:WilStaging_02 \BaseNamedObjects\SM0:8608:304:WilStaging_02_p0 \BaseNamedObjects\SM0:8608:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\taskhostw.exe.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLED73F0DB71C493640C5393A851B7D \Windows\WindowStations\Service-0x0-3e7$ 8756: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Default \Device\CNG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\CrashpadMetrics-active.pma \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8756:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8756:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:8756:304:WilStaging_02_p0h \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 8880: C:\Windows\System32\dllhost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:8880:304:WilStaging_02 \BaseNamedObjects\SM0:8880:304:WilStaging_02_p0 \BaseNamedObjects\SM0:8880:304:WilStaging_02_p0h \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLEEE60175B9FAB079C830542532252 \Windows\WindowStations\Service-0x0-3e7$ 8904: C:\Windows\System32\RuntimeBroker.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE7A8496B800A6C6D6046F0995454C \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:8904:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:8904:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:8904:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 8992: C:\Windows\System32\RuntimeBroker.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLED3CABA921AC4F02359A836B90A4B \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:8992:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:8992:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:8992:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 9084: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.14727819693170647009 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.3240850558254598133 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.5486870019090274425 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mfx_d3d_mutex \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\RPC Control\OLE179ABAB7A02C977E256128AE836A \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9084:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9084:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9084:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9084:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9084:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9084:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 9120: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Locales\en-US.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_100_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_200_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\resources.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\v8_context_snapshot.bin \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_2 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_3 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db \Device\HarddiskVolume3\Windows\System32\drivers\etc \Device\KsecDD \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.13949779436741669696 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.15091511291111169579 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.16234807570202739516 \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\RPC Control\OLE69BBDEF77D38CD9F1301F8C3BBA3 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9120:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9120:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9120:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9120:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9120:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9120:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 6020: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\CNG \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Locales\en-US.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_100_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_200_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\resources.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\v8_context_snapshot.bin \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000005.ldb \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000007.ldb \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000010.ldb \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000012.ldb \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000014.ldb \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000015.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001 \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\000003.log \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\LOG \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\MANIFEST-000001 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.5524694103993958336 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.14019793522717897277 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:6020:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:6020:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:6020:304:WilStaging_02_p0h 5644: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\CNG \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Locales\en-US.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_100_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_200_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\resources.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\v8_context_snapshot.bin \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\97209a17-8aa2-440b-a788-8c2c61fceb7a.tmp \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Subresource Filter\Indexed Rules\37\10.34.0.81\Ruleset Data \Device\HarddiskVolume3\Windows\Fonts\arial.ttf \Device\HarddiskVolume3\Windows\Fonts\arialbd.ttf \Device\HarddiskVolume3\Windows\Fonts\arialbi.ttf \Device\HarddiskVolume3\Windows\Fonts\ariali.ttf \Device\HarddiskVolume3\Windows\Fonts\ariblk.ttf \Device\HarddiskVolume3\Windows\Fonts\times.ttf \Device\HarddiskVolume3\Windows\Fonts\timesbd.ttf \Device\HarddiskVolume3\Windows\Fonts\timesbi.ttf \Device\HarddiskVolume3\Windows\Fonts\timesi.ttf \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.13949779436741669696 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.14727819693170647009 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.6459581581635443283 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:5644:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:5644:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:5644:304:WilStaging_02_p0h 9520: (ERROR: 5) 9564: C:\Windows\System32\smartscreen.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\DD9ADAAA-2585-41C5-9847-28A19BA9F344 \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\smartscreen.exe.mui \Device\Nsi \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE74F0B8CF7D9C981F07BDC71483AF \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:9564:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:9564:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:9564:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:9564:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:9564:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:9564:304:WilStaging_02_p0h \Sessions\2\Windows\WindowStations\WinSta0 9608: C:\Windows\System32\SecurityHealthSystray.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\securityhealthsso.dll.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE704D12FBF0CF6DFCC76A1606B3EC \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:9608:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:9608:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:9608:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:9608:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:9608:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:9608:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 9632: (ERROR: 5) 9876: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedgewebview2.exe \Device\CNG \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\icudtl.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\Locales\en-US.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_100_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\msedge_200_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\resources.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\141.0.3537.99\v8_context_snapshot.bin \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\21efe172-242c-4fd0-96ea-26660f9fd3bd.tmp \Device\HarddiskVolume3\Users\GT\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Subresource Filter\Indexed Rules\37\10.34.0.81\Ruleset Data \Device\HarddiskVolume3\Windows\Fonts\arial.ttf \Device\HarddiskVolume3\Windows\Fonts\arialbd.ttf \Device\HarddiskVolume3\Windows\Fonts\arialbi.ttf \Device\HarddiskVolume3\Windows\Fonts\ariali.ttf \Device\HarddiskVolume3\Windows\Fonts\ariblk.ttf \Device\HarddiskVolume3\Windows\Fonts\SegoeIcons.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\Fonts\times.ttf \Device\HarddiskVolume3\Windows\Fonts\timesbd.ttf \Device\HarddiskVolume3\Windows\Fonts\timesbi.ttf \Device\HarddiskVolume3\Windows\Fonts\timesi.ttf \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.10442630356120497420 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.15091511291111169579 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.3240850558254598133 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.8896.5524694103993958336 \Device\NamedPipe\Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\mojo.8532.9040.12244260525269883252 \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9876:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9876:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\SM0:9876:304:WilStaging_02_p0h 10060: C:\Windows\System32\wbem\WmiPrvSE.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:10060:304:WilStaging_02 \BaseNamedObjects\SM0:10060:304:WilStaging_02_p0 \BaseNamedObjects\SM0:10060:304:WilStaging_02_p0h \BaseNamedObjects\WBEM_ESS_OPEN_FOR_BUSINESS \BaseNamedObjects\Wmi Provider Sub System Counters \Default \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\PcwDrv \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \RPC Control\OLE1EAEB216A5B228D2137E0701F5D9 \Windows\WindowStations\Service-0x0-3e4$ 10440: C:\Users\GT\AppData\Local\Microsoft\OneDrive\OneDrive.exe \BaseNamedObjects\[CoreUI]-PID(10440)-TID(10444) 7a7c34ab-22ef-4ad0-b6dc-72927164fd63 \BaseNamedObjects\[CoreUI]-PID(10440)-TID(10444) aa112b75-2e21-4c40-8fcc-636d1b8e41cf \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\RotHintTable \BaseNamedObjects\SkyDrive Mutex {8EAEBBD8-2370-4716-9C12-1C4BA22A988C} - 17561334344388135517 \BaseNamedObjects\windows_shell_global_counters \Default \Device\Afd \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\25.194.1005.0003\en\FileSync.LocalizedResources.dll.mui \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2025-12-02.1134.10440.2.aodl \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\logs\Personal\telemetryCache.otc \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\logs\Personal\telemetryCache.otc-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\logs\Personal\telemetryCache.otc-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-shm \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-wal \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\settings\Personal\UXDatabase.db \Device\HarddiskVolume3\Users\GT\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2025-12-02_113454_10440-10444.log \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\kernel32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Web.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\SystemResources\wininet.dll.mun \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.4946_none_6ef530c63dc53cfc \Device\KsecDD \Device\NamedPipe\srvsvc \Device\NamedPipe\wkssvc \Device\Nsi \FileSystem\Filters\FltMgrMsg \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RetailDemo\OobeWrite \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload \REGISTRY\MACHINE\SOFTWARE\WOW6432Node \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\OneDrive \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\OneDrive\Installer\BITS \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE0F323F89B654A0DF3585407A68BD \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\28c8HWNDInterface:202dc \Sessions\2\BaseNamedObjects\28c8HWNDInterface:302ac \Sessions\2\BaseNamedObjects\AnimatedFacadePropertyChangesComplete.10440.10444 \Sessions\2\BaseNamedObjects\AnimationsComplete.10440.10444 \Sessions\2\BaseNamedObjects\BrushTransitionsComplete.10440.10444 \Sessions\2\BaseNamedObjects\BuildTreeServiceDrained.10440.10444 \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\DeferredAnimationOperationsComplete.10440.10444 \Sessions\2\BaseNamedObjects\FacadeAnimationsComplete.10440.10444 \Sessions\2\BaseNamedObjects\FileSyncClientPreSignInSettingsUpdaterNamedMutex \Sessions\2\BaseNamedObjects\FontDownloadsIdle.10440.10444 \Sessions\2\BaseNamedObjects\HasAnimations.10440.10444 \Sessions\2\BaseNamedObjects\HasBrushTransitions.10440.10444 \Sessions\2\BaseNamedObjects\HasBuildTreeWorks.10440.10444 \Sessions\2\BaseNamedObjects\HasDeferredAnimationOperations.10440.10444 \Sessions\2\BaseNamedObjects\HasFacadeAnimations.10440.10444 \Sessions\2\BaseNamedObjects\ImageDecodingIdle.10440.10444 \Sessions\2\BaseNamedObjects\ImplicitShowHideComplete.10440.10444 \Sessions\2\BaseNamedObjects\KeyboardInputReceived.10440.10444 \Sessions\2\BaseNamedObjects\OneDrive_NetworkLock \Sessions\2\BaseNamedObjects\PageNavigationComplete.10440.10444 \Sessions\2\BaseNamedObjects\PopupMenuCommandInvoked.10440.10444 \Sessions\2\BaseNamedObjects\RootVisualReset.10440.10444 \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\2\BaseNamedObjects\SM0:10440:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:10440:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:10440:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:10440:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:10440:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:10440:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\SubscribedContent-280810 \Sessions\2\BaseNamedObjects\SubscribedContent-280811 \Sessions\2\BaseNamedObjects\SubscribedContent-88000161 \Sessions\2\BaseNamedObjects\SubscribedContent-88000163 \Sessions\2\BaseNamedObjects\SubscribedContent-88000165 \Sessions\2\BaseNamedObjects\UrlZonesSM_GT \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\BaseNamedObjects\windows_webcache_counters_{9B6AB5B3-91BC-4097-835C-EA2DEC95E9CC}_S-1-5-21-940397446-1893263122-1169132827-1001 \Sessions\2\BaseNamedObjects\ZonesCacheCounterMutex \Sessions\2\BaseNamedObjects\ZonesLockedCacheCounterMutex \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 10720: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973 \BaseNamedObjects\GDA: ESENT Performance Data Schema Version 309 \BaseNamedObjects\Go0: ESENT Performance Data Schema Version 309 \BaseNamedObjects\IDA0: ESENT Performance Data Schema Version 309 \BaseNamedObjects\Instance0: ESENT Performance Data Schema Version 309 \BaseNamedObjects\MMF_BITS6cc59272-8f42-4b22-8d83-0c9e7832cca4 \BaseNamedObjects\Ready0: ESENT Performance Data Schema Version 309 \BaseNamedObjects\RotHintTable \BaseNamedObjects\SM0:10720:304:WilStaging_02 \BaseNamedObjects\SM0:10720:304:WilStaging_02_p0 \BaseNamedObjects\SM0:10720:304:WilStaging_02_p0h \Default \Device\CNG \Device\Harddisk0\DR0 \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.log \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.db \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.jfm \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\ESENT.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\mswsock.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\vsstrace.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\WsmRes.dll.mui \Device\KsecDD \Device\NamedPipe\lsass \Device\NamedPipe\wkssvc \Device\Nsi \KernelObjects\LowMemoryCondition \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\BITS \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\BITS Writer \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\OLEFA02420D68E4B36FAD30C9B8A860 \Windows\WindowStations\Service-0x0-3e7$ 10768: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\SM0:10768:304:WilStaging_02 \BaseNamedObjects\SM0:10768:304:WilStaging_02_p0 \BaseNamedObjects\SM0:10768:304:WilStaging_02_p0h \Default \Device\Afd \Device\CNG \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch2 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 \REGISTRY\USER\S-1-5-19\Control Panel\International \RPC Control\LRPC-86465d5beed76dd766 \Windows\WindowStations\Service-0x0-3e5$ 10812: C:\Windows\System32\SearchIndexer.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \BaseNamedObjects\MsWds-Notify-Event \BaseNamedObjects\SearchCrawlScopeVersion \BaseNamedObjects\SearchServiceMUT \BaseNamedObjects\SM0:10812:120:WilError_03 \BaseNamedObjects\SM0:10812:120:WilError_03_p0 \BaseNamedObjects\SM0:10812:120:WilError_03_p0h \BaseNamedObjects\SM0:10812:304:WilStaging_02 \BaseNamedObjects\SM0:10812:304:WilStaging_02_p0 \BaseNamedObjects\SM0:10812:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\UGATHERER \BaseNamedObjects\UGathererObj \BaseNamedObjects\UGTHRSVC \BaseNamedObjects\UGthrSvcObj \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1 \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1DAE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1DRE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1DSE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1RCM \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1SDE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1TRM \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1 \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1DAE \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1DRE \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1DSE \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1RCM \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1TRM \BaseNamedObjects\windows_shell_global_counters \BaseNamedObjects\WindowsSearchService_EfsRegKeysMutex \BaseNamedObjects\WSearchIdxPi \BaseNamedObjects\WseIdxPm \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3 \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.3.Crwl \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.3.gthr \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db-wal \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db-wal \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db-wal \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-shm \Device\HarddiskVolume3\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\SearchIndexer.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\vsstrace.dll.mui \Device\KsecDD \Device\NamedPipe\MsFteWds \KernelObjects\MaximumCommitCondition \KnownDlls \mssrestricteddesk \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ProgIdIndex \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\TypeLibIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\FileChangeClientConfigs \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Crawls \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Extensions \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Mappings \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\Csc\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\DP\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\File\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\IEHistory\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\IERSS\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\Mapi\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Protocols\WinRT\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\1 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\10 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\11 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\12 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\2 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\3 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\4 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\5 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\6 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\7 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\8 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\9 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-940397446-1893263122-1169132827-1000} \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-940397446-1893263122-1169132827-1000}\Paths \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-940397446-1893263122-1169132827-1001} \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-940397446-1893263122-1169132827-1001}\Paths \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-940397446-1893263122-1169132827-1001}\Paths\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-940397446-1893263122-1169132827-1001}\Paths\1 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\StartPages \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\StartPages\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\StartPages\1 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\StartPages\3 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\StartPages\4 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\StreamLog \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\PluginManagers \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\PluginManagers\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\PluginManagers\1 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\Projects \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\Projects\SystemIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\Projects\SystemIndex\ActivePlugins \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\Projects\SystemIndex\ActivePlugins\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\Projects\SystemIndex\Plugins \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager\Applications\Windows\Projects\SystemIndex\Plugins\0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\MSSearch Service Writer \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \RPC Control\OLE631F9B00788F4190B3A9D4EFBCAF \Windows\WindowStations\msswindowstation \Windows\WindowStations\Service-0x0-3e7$ 3316: (ERROR: 87) 9288: C:\Windows\System32\SearchProtocolHost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \BaseNamedObjects\FilterThreadStopped_00002448 \BaseNamedObjects\SM0:9288:120:WilError_03 \BaseNamedObjects\SM0:9288:120:WilError_03_p0 \BaseNamedObjects\SM0:9288:120:WilError_03_p0h \BaseNamedObjects\SM0:9288:304:WilStaging_02 \BaseNamedObjects\SM0:9288:304:WilStaging_02_p0 \BaseNamedObjects\SM0:9288:304:WilStaging_02_p0h \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1 \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1DAE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1DRE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1DSE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1RCM \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1SDE \BaseNamedObjects\UsGthrCtrlFltPipeMssGthrPipe1TRM \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1 \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1DAE \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1DRE \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1DSE \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1RCM \BaseNamedObjects\UsGthrFltPipeMssGthrPipe1_1TRM \BaseNamedObjects\windows_shell_global_counters \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ProgIdIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Search\Gathering Manager \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer \RPC Control\OLE0BC756439FCCD3D7D6F62DB778B1 \Windows\WindowStations\Service-0x0-3e7$ 10172: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe \BaseNamedObjects \BaseNamedObjects\MpEvent-2E409503-C606-D796-2229-FB13053CAD2A \BaseNamedObjects\MpSvcEvent-951A3313-3F25-BE1C-D222-62C1D59511AA \BaseNamedObjects\SM0:10172:304:WilStaging_02 \BaseNamedObjects\SM0:10172:304:WilStaging_02_p0 \BaseNamedObjects\SM0:10172:304:WilStaging_02_p0h \Default \Device\ConDrv \Device\HarddiskVolume3\Windows\System32 \Device\KsecDD \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \Windows\WindowStations\Service-0x0-3e7$ 9268: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MpCmdRun.exe \BaseNamedObjects \BaseNamedObjects\MpEvent-406D71CD-9E00-4E4C-327D-513D62A901BD \BaseNamedObjects\MpSvcEvent-951A3313-3F25-BE1C-D222-62C1D59511AA \BaseNamedObjects\SM0:9268:304:WilStaging_02 \BaseNamedObjects\SM0:9268:304:WilStaging_02_p0 \BaseNamedObjects\SM0:9268:304:WilStaging_02_p0h \Default \Device\ConDrv \Device\HarddiskVolume3\Windows\System32 \Device\KsecDD \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT\Control Panel\International \Windows\WindowStations\Service-0x0-3e7$ 1316: C:\Windows\System32\conhost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1316:120:WilError_03 \BaseNamedObjects\SM0:1316:120:WilError_03_p0 \BaseNamedObjects\SM0:1316:120:WilError_03_p0h \BaseNamedObjects\SM0:1316:304:WilStaging_02 \BaseNamedObjects\SM0:1316:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1316:304:WilStaging_02_p0h \Default \Device\CNG \Device\ConDrv \Device\HarddiskVolume3\Windows \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\en-US\Conhost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 1044: C:\Windows\System32\conhost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:1044:120:WilError_03 \BaseNamedObjects\SM0:1044:120:WilError_03_p0 \BaseNamedObjects\SM0:1044:120:WilError_03_p0h \BaseNamedObjects\SM0:1044:304:WilStaging_02 \BaseNamedObjects\SM0:1044:304:WilStaging_02_p0 \BaseNamedObjects\SM0:1044:304:WilStaging_02_p0h \Default \Device\CNG \Device\ConDrv \Device\HarddiskVolume3\Windows \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\en-US\Conhost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\.DEFAULT \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \Windows\WindowStations\Service-0x0-3e7$ 9224: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\Fonts\calibri.ttf \Device\HarddiskVolume3\Windows\Fonts\segmdl2.ttf \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.ui.xaml.dll.mui \Device\HarddiskVolume3\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy \Device\KsecDD \Device\MMCSS \KnownDlls \REGISTRY\A\{D3C116A9-B0B6-4AC3-8E7F-FE30A0DD5A1B} \REGISTRY\A\{D634341E-540E-46B6-AC12-C324378D1A56} \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses \REGISTRY\MACHINE\SOFTWARE\Classes\ActivatableClasses\Package \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\USER \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\Colors \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\Geo \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Control Panel\International\User Profile \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Main \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Internet Explorer\Security \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.shellexperiencehost_cw5n1h2txyewy \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\2408HWNDInterface:1033c \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\2408HWNDInterface:10344 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\[CoreUI]-PID(9224)-TID(10052) 27001599-1cbe-422e-8318-02711bc06b6a \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\[CoreUI]-PID(9224)-TID(10052) 62b45e28-92e0-4fab-add1-3e2cdbf1a46c \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\[CoreUI]-PID(9224)-TID(9264) b3cc0ee8-4532-424e-8707-0d86c58075e4 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\[CoreUI]-PID(9224)-TID(9264) b3e52147-336d-4c62-bf6e-6f9ab648a706 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\AnimatedFacadePropertyChangesComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\AnimatedFacadePropertyChangesComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\AnimationsComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\AnimationsComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\ApplicationService:24081dc637fb7cc4a4e \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\BrushTransitionsComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\BrushTransitionsComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\BuildTreeServiceDrained.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\BuildTreeServiceDrained.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\DeferredAnimationOperationsComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\DeferredAnimationOperationsComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\FacadeAnimationsComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\FacadeAnimationsComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\FontDownloadsIdle.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\FontDownloadsIdle.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasAnimations.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasAnimations.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasBrushTransitions.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasBrushTransitions.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasBuildTreeWorks.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasBuildTreeWorks.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasDeferredAnimationOperations.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasDeferredAnimationOperations.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasFacadeAnimations.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\HasFacadeAnimations.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\ImageDecodingIdle.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\ImageDecodingIdle.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\ImplicitShowHideComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\ImplicitShowHideComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\KeyboardInputReceived.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\KeyboardInputReceived.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\PageNavigationComplete.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\PageNavigationComplete.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\PopupMenuCommandInvoked.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\PopupMenuCommandInvoked.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\RootVisualReset.9224.10052 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\RootVisualReset.9224.9264 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\RPC Control\OLEA4A71793323FA20F43B551A1C53B \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\SM0:9224:120:WilError_03 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\SM0:9224:120:WilError_03_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\SM0:9224:120:WilError_03_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\SM0:9224:304:WilStaging_02 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\SM0:9224:304:WilStaging_02_p0 \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\SM0:9224:304:WilStaging_02_p0h \Sessions\2\AppContainerNamedObjects\S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 10232: C:\Windows\System32\RuntimeBroker.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001_Classes\Local Settings\Software\Microsoft \RPC Control\OLE1607677784CA59B0A0B9B27A922F \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db \Sessions\2\BaseNamedObjects\SM0:10232:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:10232:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:10232:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:10232:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:10232:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:10232:304:WilStaging_02_p0h \Sessions\2\BaseNamedObjects\windows_shell_global_counters \Sessions\2\Windows\WindowStations\WinSta0 10344: C:\Windows\System32\audiodg.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\AudioEngineDuplicateHandleApiPort1763925490 \BaseNamedObjects\SM0:10344:304:WilStaging_02 \BaseNamedObjects\SM0:10344:304:WilStaging_02_p0 \BaseNamedObjects\SM0:10344:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\audiodg.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\imaadp32.acm.mui \Device\HarddiskVolume3\Windows\System32\en-US\l3codeca.acm.mui \Device\HarddiskVolume3\Windows\System32\en-US\msacm32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\msadp32.acm.mui \Device\HarddiskVolume3\Windows\System32\en-US\msg711.acm.mui \Device\HarddiskVolume3\Windows\System32\en-US\msgsm32.acm.mui \Device\MMCSS \Device\NamedPipe\TSVCPIPE-53148c24-df40-4aa0-8a4d-6f608a4f9ca9 \Device\NamedPipe\TSVCPIPE-ebfc06b9-94c0-4aed-851d-4d9cb78dce0d \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\Audio\RemoteRender\{6C26BA7D-F0B2-4225-B422-8168C5261E45}\Properties \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-19 \REGISTRY\USER\S-1-5-19\Control Panel\International \RPC Control\AudioDeviceGraph \RPC Control\OLEF7222EDBCEC9341322248A6258C2 \Windows\WindowStations\Service-0x0-3e5$ 7296: (ERROR: 87) 5696: C:\Users\GT\Desktop\VSTriage.exe \Device\ConDrv \Device\HarddiskVolume3\Users\GT\Desktop \Device\Nsi \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\crypt32 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces \REGISTRY\USER \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SM0:5696:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:5696:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:5696:304:WilStaging_02_p0h 5704: C:\Windows\System32\svchost.exe \BaseNamedObjects \BaseNamedObjects\__ComCatalogCache__ \BaseNamedObjects\SM0:5704:304:WilStaging_02 \BaseNamedObjects\SM0:5704:304:WilStaging_02_p0 \BaseNamedObjects\SM0:5704:304:WilStaging_02_p0h \BaseNamedObjects\TermSrvReadyEvent \BaseNamedObjects\UFH_{DC27E4C7-C59E-4710-927B-9F9C958092B1} \Default \Device\CNG \Device\DeviceApi \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\KsecDD \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\ClientTelemetry\TpRequests \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime \REGISTRY\MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services \REGISTRY\USER\.DEFAULT\Control Panel\International \REGISTRY\USER\.DEFAULT\Software\Classes \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft \RPC Control\LRPC-f04c21a43d43fb9f35 \Windows\WindowStations\Service-0x0-3e7$ 11016: C:\Windows\System32\conhost.exe \BaseNamedObjects\__ComCatalogCache__ \Default \Device\CNG \Device\ConDrv \Device\HarddiskVolume3\Windows \Device\HarddiskVolume3\Windows\Fonts\StaticCache.dat \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\en-US\Conhost.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c \KernelObjects\MaximumCommitCondition \KnownDlls \REGISTRY\MACHINE \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom \REGISTRY\MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex \REGISTRY\MACHINE\SOFTWARE\Microsoft\Ole \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \REGISTRY\USER\S-1-5-21-940397446-1893263122-1169132827-1001 \RPC Control\OLE312C16E13F02755E1F9DCB6D9D5A \Sessions\2\BaseNamedObjects \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference \Sessions\2\BaseNamedObjects\SM0:11016:120:WilError_03 \Sessions\2\BaseNamedObjects\SM0:11016:120:WilError_03_p0 \Sessions\2\BaseNamedObjects\SM0:11016:120:WilError_03_p0h \Sessions\2\BaseNamedObjects\SM0:11016:304:WilStaging_02 \Sessions\2\BaseNamedObjects\SM0:11016:304:WilStaging_02_p0 \Sessions\2\BaseNamedObjects\SM0:11016:304:WilStaging_02_p0h \Sessions\2\Windows\Theme791629490 \Sessions\2\Windows\WindowStations\WinSta0 \Windows\Theme4153972102 ====ARP Cache==== 2025-12-02T11:35:20Z [0xe] 01-00-5E-00-00-16 224.0.0.22 NlnsPermanent [0xe] 01-00-5E-7F-FF-FA 239.255.255.250 NlnsPermanent [0xe] 33-33-00-00-00-16 ff02::16 NlnsPermanent ====IP Config==== 2025-12-02T11:35:20Z IfIndex [0xe] Name: {F51DFA0B-5BBE-4845-A930-9AFC1AB48E18} Friendly Name: Ethernet Description: Microsoft Hyper-V Network Adapter OperStatus: Down Physical Address: 00-15-5D-C7-EA-2C MTU: 1500 DHCPv4: TRUE NetBios over TCP/IP: TRUE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 10000000000/10000000000 Dns Suffix: mshome.net DHCPv4 Server: DHCPv6 Server: Unicast: Address: fe80::613:1bf2:1846:741b ValidLifetime [s]: -1 PreferredLifetime [s]: -1 LeaseLifetime [s]: 47 OnLinkPrefixLength: 64 Address: 169.254.38.46 ValidLifetime [s]: -1 PreferredLifetime [s]: -1 LeaseLifetime [s]: 38 OnLinkPrefixLength: 16 Gateway: DNS Server: Address: 172.24.16.1 Anycast: Multicast: Address: ff01::1 Address: ff02::1 Address: ff02::1:ff46:741b Address: 224.0.0.1 IfIndex [0x1] Name: {23BD984B-8DE7-11F0-A9B2-806E6F6E6963} Friendly Name: Loopback Pseudo-Interface 1 Description: Software Loopback Interface 1 OperStatus: Up Physical Address: MTU: -1 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 24 Speed Tx/Rx [bps]: 1073741824/1073741824 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Address: ::1 ValidLifetime [s]: -1 PreferredLifetime [s]: -1 LeaseLifetime [s]: 50 OnLinkPrefixLength: 128 Address: 127.0.0.1 ValidLifetime [s]: -1 PreferredLifetime [s]: -1 LeaseLifetime [s]: 50 OnLinkPrefixLength: 8 Gateway: DNS Server: Address: fec0:0:0:ffff::1 Address: fec0:0:0:ffff::2 Address: fec0:0:0:ffff::3 Anycast: Multicast: Address: ff02::c Address: 239.255.255.250 IfIndex [0xf] Name: {D16A00B5-CF72-11F0-A9BD-806E6F6E6963} Friendly Name: Ethernet-WFP Native MAC Layer LightWeight Filter-0000 Description: Microsoft Hyper-V Network Adapter-WFP Native MAC Layer LightWeight Filter-0000 OperStatus: Down Physical Address: 00-15-5D-C7-EA-2C MTU: 1500 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 10000000000/10000000000 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x10] Name: {D16A00B6-CF72-11F0-A9BD-806E6F6E6963} Friendly Name: Ethernet-QoS Packet Scheduler-0000 Description: Microsoft Hyper-V Network Adapter-QoS Packet Scheduler-0000 OperStatus: Down Physical Address: 00-15-5D-C7-EA-2C MTU: 1500 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 10000000000/10000000000 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x11] Name: {D16A00B7-CF72-11F0-A9BD-806E6F6E6963} Friendly Name: Ethernet-WFP 802.3 MAC Layer LightWeight Filter-0000 Description: Microsoft Hyper-V Network Adapter-WFP 802.3 MAC Layer LightWeight Filter-0000 OperStatus: Down Physical Address: 00-15-5D-C7-EA-2C MTU: 1500 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 10000000000/10000000000 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0xa] Name: {A0CD16A7-38F7-498A-8E22-CD08D78ACD38} Friendly Name: Ethernet (Kernel Debugger) Description: Microsoft Kernel Debug Network Adapter OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: TRUE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x3] Name: {20A77427-4DF6-4EA3-A65F-A0CC9C05D65B} Friendly Name: Local Area Connection* 6 Description: WAN Miniport (IP) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x7] Name: {63EF83A5-C8F3-4C53-9642-C22AEF2AE740} Friendly Name: Local Area Connection* 7 Description: WAN Miniport (IPv6) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0xd] Name: {EB8A28A4-D5BC-4373-8132-386F71A4309F} Friendly Name: Local Area Connection* 8 Description: WAN Miniport (Network Monitor) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 6 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x8] Name: {8135048C-B0B0-4F85-A218-5CB8793B9E48} Friendly Name: Local Area Connection* 5 Description: WAN Miniport (PPPOE) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 23 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x9] Name: {93123211-9629-4E04-82F0-EA2E4F221468} Friendly Name: Teredo Tunneling Pseudo-Interface Description: Microsoft Teredo Tunneling Adapter OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x4] Name: {2EE2C70C-A092-4D88-A654-98C8D7645CD5} Friendly Name: Microsoft IP-HTTPS Platform Interface Description: Microsoft IP-HTTPS Platform Adapter OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x2] Name: {07374750-E68B-490E-9330-9FD785CD71B6} Friendly Name: 6to4 Adapter Description: Microsoft 6to4 Adapter OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x6] Name: {5C9DB56E-31EF-4865-8F46-70969A248D96} Friendly Name: Local Area Connection* 1 Description: WAN Miniport (SSTP) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0x5] Name: {35BF86D7-4278-4A44-826B-9FC07471D495} Friendly Name: Local Area Connection* 2 Description: WAN Miniport (IKEv2) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0xc] Name: {C1F55FCC-6391-4D42-ACED-71132BA8EE18} Friendly Name: Local Area Connection* 3 Description: WAN Miniport (L2TP) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: IfIndex [0xb] Name: {A4B8E877-4278-40FC-B533-E81E038CAEA3} Friendly Name: Local Area Connection* 4 Description: WAN Miniport (PPTP) OperStatus: NotPresent Physical Address: MTU: 0 DHCPv4: FALSE NetBios over TCP/IP: FALSE RegisterAdapterSuffix: FALSE IANA ifType: 131 Speed Tx/Rx [bps]: 0/0 Dns Suffix: DHCPv4 Server: DHCPv6 Server: Unicast: Gateway: DNS Server: Anycast: Multicast: ====DNS Cache==== 2025-12-02T11:35:20Z ====TCP/IP Connections==== 2025-12-02T11:35:20Z TCP 0.0.0.0:135 0.0.0.0:0 LISTEN 1328 2025-12-02T11:34:36Z TCP 0.0.0.0:445 0.0.0.0:0 LISTEN 4 2025-12-02T11:34:40Z TCP 0.0.0.0:5040 0.0.0.0:0 LISTEN 6752 2025-12-02T11:34:48Z TCP 0.0.0.0:49664 0.0.0.0:0 LISTEN 1052 2025-12-02T11:34:36Z TCP 0.0.0.0:49665 0.0.0.0:0 LISTEN 964 2025-12-02T11:34:36Z TCP 0.0.0.0:49666 0.0.0.0:0 LISTEN 1808 2025-12-02T11:34:36Z TCP 0.0.0.0:49667 0.0.0.0:0 LISTEN 2184 2025-12-02T11:34:39Z TCP 0.0.0.0:49668 0.0.0.0:0 LISTEN 2776 2025-12-02T11:34:39Z TCP 0.0.0.0:49669 0.0.0.0:0 LISTEN 4012 2025-12-02T11:34:40Z TCP 0.0.0.0:49670 0.0.0.0:0 LISTEN 860 2025-12-02T11:34:40Z TCP [::]:135 [::]:0 LISTEN 1328 2025-12-02T11:34:36Z TCP [::]:445 [::]:0 LISTEN 4 2025-12-02T11:34:40Z TCP [::]:49664 [::]:0 LISTEN 1052 2025-12-02T11:34:36Z TCP [::]:49665 [::]:0 LISTEN 964 2025-12-02T11:34:36Z TCP [::]:49666 [::]:0 LISTEN 1808 2025-12-02T11:34:36Z TCP [::]:49667 [::]:0 LISTEN 2184 2025-12-02T11:34:39Z TCP [::]:49668 [::]:0 LISTEN 2776 2025-12-02T11:34:39Z TCP [::]:49669 [::]:0 LISTEN 4012 2025-12-02T11:34:40Z TCP [::]:49670 [::]:0 LISTEN 860 2025-12-02T11:34:40Z UDP 0.0.0.0:5050 *.* 6752 2025-12-02T11:34:48Z UDP 127.0.0.1:1900 *.* 10768 2025-12-02T11:34:55Z UDP 127.0.0.1:49664 *.* 3516 2025-12-02T11:34:40Z UDP 127.0.0.1:61717 *.* 10768 2025-12-02T11:34:55Z UDP [::1]:1900 *.* 10768 2025-12-02T11:34:55Z UDP [::1]:61716 *.* 10768 2025-12-02T11:34:55Z ====Logons==== 2025-12-02T11:35:20Z [0x00] LUID: 0:0x7cdd4 Session: 2 User: DESKTOP-ORDL0UQ\GT (S-1-5-21-940397446-1893263122-1169132827-1001) Authentication: NTLM:RemoteInteractive LogonServer: DESKTOP-ORDL0UQ LogonTime: 2025-12-02T11:34:47Z PasswordLastSet: 2025-09-09T15:45:54Z [0x01] LUID: 0:0x7cda3 Session: 2 User: DESKTOP-ORDL0UQ\GT (S-1-5-21-940397446-1893263122-1169132827-1001) Authentication: NTLM:RemoteInteractive LogonServer: DESKTOP-ORDL0UQ LogonTime: 2025-12-02T11:34:47Z PasswordLastSet: 2025-09-09T15:45:54Z [0x02] LUID: 0:0x49a4d Session: 2 User: Window Manager\DWM-2 (S-1-5-90-0-2) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:43Z [0x03] LUID: 0:0x499a8 Session: 2 User: Window Manager\DWM-2 (S-1-5-90-0-2) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:43Z [0x04] LUID: 0:0x4892f Session: 2 User: Font Driver Host\UMFD-2 (S-1-5-96-0-2) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:43Z [0x05] LUID: 0:0x3e5 Session: 0 User: NT AUTHORITY\LOCAL SERVICE (S-1-5-19) Authentication: Negotiate:Service LogonTime: 2025-12-02T11:34:36Z [0x06] LUID: 0:0xe4a4 Session: 1 User: Window Manager\DWM-1 (S-1-5-90-0-1) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:36Z [0x07] LUID: 0:0xe45e Session: 1 User: Window Manager\DWM-1 (S-1-5-90-0-1) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:36Z [0x08] LUID: 0:0x3e4 Session: 0 User: WORKGROUP\DESKTOP-ORDL0UQ$ (S-1-5-20) Authentication: Negotiate:Service LogonTime: 2025-12-02T11:34:36Z [0x09] LUID: 0:0x88fd Session: 0 User: Font Driver Host\UMFD-0 (S-1-5-96-0-0) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:36Z [0x0a] LUID: 0:0x88e9 Session: 1 User: Font Driver Host\UMFD-1 (S-1-5-96-0-1) Authentication: Negotiate:Interactive LogonTime: 2025-12-02T11:34:36Z [0x0b] LUID: 0:0x82cf Session: 0 User: \ ((null)) Authentication: NTLM:UndefinedLogonType LogonTime: 2025-12-02T11:34:36Z [0x0c] LUID: 0:0x3e7 Session: 0 User: WORKGROUP\DESKTOP-ORDL0UQ$ (S-1-5-18) Authentication: NTLM:UndefinedLogonType LogonTime: 2025-12-02T11:34:36Z ====BitLocker Keys==== 2025-12-02T11:35:20Z Volume: \\?\Volume{0b570b47-5ed7-4860-a104-9ade5e5da772}\ C:\ Key Id: 6f31d47d-665b-4658-afdf-34c93fa26f45 CreationTime: 2025-09-09T15:43:02Z Volume: \\?\Volume{455f3b2d-4a66-45d5-a90b-1c13066c5cb6}\ *** NO MOUNT POINTS *** (BitLocker Drive Encryption is not enabled on this drive.) Volume: \\?\Volume{cb0b64a9-a696-404a-af09-6d9556fea29a}\ *** NO MOUNT POINTS *** (BitLocker Drive Encryption is not enabled on this drive.) Volume: \\?\Volume{23bd9865-8de7-11f0-a9b2-806e6f6e6963}\ D:\ (ERROR 0x80310015)