403Webshell
Server IP : 121.121.20.254  /  Your IP : 216.73.217.64
Web Server : Microsoft-IIS/10.0
System : Windows NT WEB-SERVER 10.0 build 20348 (Windows Server 2022) AMD64
User : IUSR ( 0)
PHP Version : 8.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/debug/WIA/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/Windows/debug/WIA/wiatrace.log
**************** Started trace for Module: [sti.dll] in Executable [FoxitPDFReader20243_enu_Setup_Prom.tmp] ProcessID: [3024] at 2024/11/01 12:24:45:316 ****************
WIA: 3024.3020 12015 0 0 [sti.dll] DllEntryPoint, sti.dll (0x72680000) received DLL_PROCESS_DETACH, process terminating: 0
WIA: 3024.3020 12015 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 3024.3020 12015 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server

**************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [12484] at 2025/06/19 22:04:16:168 ****************
WIA: 12484.11888 0 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized
WIA: 12484.11888 0 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 11256
WIA: 12484.11256 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep...
WIA: 12484.5128 0 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes
WIA: 12484.5128 0 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787)
WIA: 12484.5128 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume...
WIA: 12484.5128 0 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning
WIA: 12484.11256 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread...
WIA: 12484.11256 0 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue
WIA: 12484.11256 0 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)...
WIA: 12484.11256 0 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x0000025E81E07550
WIA: 12484.11256 0 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787..
WIA: 12484.11256 0 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000
WIA: 12484.11256 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE
WIA: 12484.11256 0 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby...
WIA: 12484.11256 0 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 7664)
WIA: 12484.11256 0 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices)
WIA: 12484.7664 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}..
WIA: 12484.7664 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge...
WIA: 12484.7664 0 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL...
WIA: 12484.13196 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr
WIA: 12484.11888 16 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success
WIA: 12484.11256 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices
WIA: 12484.11256 16 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0
WIA: 12484.11888 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices)
WIA: 12484.11888 16 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices
WIA: 12484.11256 16 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted
WIA: 12484.11256 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep...
WIA: 12484.11888 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 12484.11888 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 12484.11888 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 12484.11888 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 12484.11888 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: Internal
WIA: 12484.11888 16 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: Foxit Reader
WIA: 12484.11888 16 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running.
WIA: 12484.13196 16 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate

**************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [1804] at 2025/06/19 22:04:16:184 ****************
WIA: 1804.10352 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server
WIA: 12484.13196 16 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client
WIA: 12484.13196 16 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001
WIA: 12484.13196 16 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier
WIA: 1804.10352 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 00000206D938D0C0 from server

WIA: 1804.10352 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started...
WIA: 12484.13196 16 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration:
WIA: 1804.11604 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 12484.13196 16 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 1804.11604 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel...
WIA: 1804.10352 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 1804.10352 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:
WIA: 1804.10352 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 12484.9940 16 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification
WIA: 12484.13196 16 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration:
WIA: 12484.13196 16 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 1804.10352 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 1804.10352 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:
WIA: 1804.10352 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 12484.13196 8453 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration:
WIA: 12484.13196 8453 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 1804.10352 8437 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 1804.10352 8437 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration:
WIA: 1804.10352 8437 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 12484.13196 8453 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration:
WIA: 12484.13196 8453 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 1804.10352 8437 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 1804.10352 8437 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration:
WIA: 1804.10352 8437 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000206DB04AD90
WIA: 1804.10352 8437 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ...
WIA: 12484.13196 8453 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001
WIA: 12484.13196 8453 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001
WIA: 12484.13196 8453 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal
WIA: 1804.10352 8437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server
WIA: 12484.592 8453 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 1804.10352 8437 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server
WIA: 12484.592 8469 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification
WIA: 12484.592 8469 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall
WIA: 1804.11604 8453 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread!
WIA: 12484.592 8469 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0
WIA: 1804.11604 8453 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00002D54 is now shut down
WIA: 12484.592 8469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 1804.10352 8469 0 0 [sti.dll] DllEntryPoint, sti.dll (0x60EC0000) received DLL_PROCESS_DETACH, process terminating: 1
WIA: 1804.10352 8469 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 1804.10352 8469 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server
WIA: 12484.9524 8500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001
WIA: 12484.9524 8500 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001
WIA: 12484.592 8500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 12484.592 8500 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 12484.592 38469 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service
WIA: 12484.592 38469 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0
WIA: 12484.11888 38469 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher
WIA: 12484.11888 38469 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler,  (0000025E81E064C0)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler,  (0000025E81E06420)
WIA: 12484.11888 38469 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher
WIA: 12484.11888 38469 1 0 [wiaservc.dll] Dispatcher::~Dispatcher,  (0000025E81E05E30)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource,  (0000025E81E06380)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager,  (0000025E81E06560)
WIA: 12484.11888 38469 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager
WIA: 12484.11888 38469 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager
WIA: 12484.11888 38469 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator,  (0000025E81E06E30)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler,  (0000025E81E06730)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet,  (0000025E81E06680)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr,  (0000025E81E07090)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier,  (0000025E81E07100)
WIA: 12484.11888 38469 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (0000025E81E04DF0)
WIA: 12484.11888 38469 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1
WIA: 12484.592 38469 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 12484.11888 38469 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler,  (0000025E81E05F00)
WIA: 12484.11888 38469 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate...
WIA: 12484.11256 38469 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread
WIA: 12484.11888 38469 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0

**************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [12484] at 2025/06/19 22:04:16:184 ****************
WIA: 12484.5128 38453 0 0 [sti.dll] DllEntryPoint, sti.dll (0x60EC0000) received DLL_PROCESS_DETACH, process terminating: 1
WIA: 12484.5128 38453 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 12484.5128 38453 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server

**************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [4152] at 2025/08/21 10:53:54:665 ****************
WIA: 4152.14236 16 80000000 0 [wiaservc.dll] SchedulerInitialize, Work item scheduler initialized
WIA: 4152.14236 16 0 0 [wiaservc.dll] SCMControlHandler::SCMControlHandler, Created control thread Id 17548
WIA: 4152.17548 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep...
WIA: 4152.28176 16 0 0 [wiaservc.dll] SCMControlQueue::Push, SERVICE_CONTROL_POWEREVENT (control: 13, event type: 32787): 24 bytes
WIA: 4152.28176 16 0 0 [wiaservc.dll] SCMControlQueue::Push, Adding control request to queue (control: 13, event type: 32787)
WIA: 4152.28176 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Signaling control thread to resume...
WIA: 4152.28176 16 0 0 [wiaservc.dll] SCMControlHandler::ControlFunction, Control function (control: 13, event type: 32787) returning
WIA: 4152.17548 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Resuming control thread...
WIA: 4152.17548 16 0 0 [wiaservc.dll] SCMControlQueue::Pop, Control request (control: 13, event type: 32787) detached from queue
WIA: 4152.17548 16 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Processing control request (control: 13, event type: 32787)...
WIA: 4152.17548 16 2 0 [wiaservc.dll] Dispatcher::ProcessEvent, System event received: dwControl 13, dwEventType 32787, lpEventData: 0x000001EA5C607550
WIA: 4152.17548 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event, control code 13, event type 32787..
WIA: 4152.17548 16 0 0 [wiaservc.dll] DeviceClassEnumeratorHandler::ProcessEvent, Processing system event control code 13, event type 32787, completed with with hr 0x00000000
WIA: 4152.17548 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Message from Power Management: PBT_POWERSETTINGCHANGE
WIA: 4152.17548 16 2 0 [wiaservc.dll] PowerEventHandler::ProcessEvent, Leaving Connected Standby...
WIA: 4152.17548 16 0 0 [wiaservc.dll] DeviceListManager::InitializeWSDChallenge, WSD Challenge successfully initiated (thread: 22516)
WIA: 4152.22516 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intializing WSD Challenge for {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}..
WIA: 4152.22516 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Intialize WSD Challenge...
WIA: 4152.22516 16 80000000 0 [wiaservc.dll] InitializeWSDChallenge, Load WSD Challenge DLL...
WIA: 4152.17548 16 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices)
WIA: 4152.13564 16 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr
WIA: 4152.14236 31 80000000 0 [wiaservc.dll] StartFactories, StartFactories, Success
WIA: 4152.17548 31 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices
WIA: 4152.17548 31 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_RUNNING, StateCode=4, WaitHint=0
WIA: 4152.14236 31 8 0 [wiaservc.dll] RegistryDeviceEnumerator::Refresh, An error occured in RegistryDeviceEnumerator when enumerating the subkeys for (SYSTEM\CurrentControlSet\Control\StillImage\FakeDevices)
WIA: 4152.14236 47 80000000 0 [wiaservc.dll] DeviceListManager::Enumerate, The DeviceListManager is done enumerating devices
WIA: 4152.17548 47 0 0 [wiaservc.dll] SCMControlQueue::ControlRequest::~ControlRequest, Control request (control: 13, event type: 32787) deleted
WIA: 4152.17548 47 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Requests queue empty, control thread entering sleep...
WIA: 4152.14236 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 4152.14236 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 4152.14236 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 4152.14236 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: @wiaacmgr.exe,-101
WIA: 4152.14236 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: Internal
WIA: 4152.14236 47 0 0 [wiaservc.dll] CEventNotifier::RestoreDevPersistentCBs, Restoring CBs for Device: NULL, Program: Foxit Reader
WIA: 4152.14236 47 80000000 0 [wiaservc.dll] WiaService::Run, The WIA service is now running.
WIA: 4152.13564 47 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate

**************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [16864] at 2025/08/21 10:53:54:706 ****************
WIA: 16864.23136 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server
WIA: 4152.13564 47 20 0 [wiaservc.dll] StiRpcSecurityCallBack, STI Security: We have a local client
WIA: 4152.13564 47 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000001
WIA: 4152.13564 47 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000001 to WiaEventNotifier
WIA: 16864.23136 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 0000019150F5E8C0 from server

WIA: 16864.23136 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started...
WIA: 16864.27452 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 4152.23692 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration:
WIA: 4152.23692 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 16864.27452 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel...
WIA: 16864.23136 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 16864.23136 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:
WIA: 16864.23136 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 4152.13564 47 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification
WIA: 4152.23692 47 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration:
WIA: 4152.23692 47 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 16864.23136 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 16864.23136 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:
WIA: 16864.23136 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 4152.23692 5125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration:
WIA: 4152.23692 5125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 16864.23136 5078 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 16864.23136 5078 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration:
WIA: 16864.23136 5078 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 4152.23692 5125 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration:
WIA: 4152.23692 5125 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 16864.23136 5078 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 16864.23136 5078 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration:
WIA: 16864.23136 5078 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x00000191536EAF90
WIA: 16864.23136 5078 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ...
WIA: 4152.23692 5125 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000001
WIA: 4152.23692 5125 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001
WIA: 4152.23692 5125 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000001 marked for removal
WIA: 4152.15848 5125 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 16864.23136 5078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server
WIA: 16864.23136 5078 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server
WIA: 4152.15848 5141 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification
WIA: 4152.15848 5141 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall
WIA: 4152.15848 5141 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0
WIA: 16864.27452 5094 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread!
WIA: 16864.27452 5094 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x00006B3C is now shut down
WIA: 4152.15848 5141 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 16864.23136 5109 0 0 [sti.dll] DllEntryPoint, sti.dll (0x28F20000) received DLL_PROCESS_DETACH, process terminating: 1
WIA: 16864.23136 5109 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 16864.23136 5109 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server
WIA: 4152.23692 5172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001
WIA: 4152.23692 5172 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000001
WIA: 4152.15848 5172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 4152.15848 5172 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 4152.13564 6938 0 0 [wiaservc.dll] RemoveWorkItem, Schedule::RemoveWorkItem (2) 
WIA: 4152.13564 6938 0 0 [wiaservc.dll] SCHED_ITEM::Close, DeviceEvent [0x0] marked to be closed
WIA: 4152.13564 6938 0 0 [wiaservc.dll] CWiaDevMgr::CreateInstance, Created WiaDevMgr
WIA: 4152.13564 6953 80000000 0 [wiaservc.dll] DeviceListManager::CreateDeviceInformationArray, There are no devices to enumerate

**************** Started trace for Module: [sti.dll] in Executable [mspaint.exe] ProcessID: [23632] at 2025/08/21 10:54:01:605 ****************
WIA: 23632.21468 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, AsyncRPC Connection established to server
WIA: 4152.13564 6953 2 0 [wiaservc.dll] OpenClientConnection, Opened client connection for 0000000000000002
WIA: 4152.13564 6953 2 0 [wiaservc.dll] WiaEventNotifier::AddClient, => Added client 0000000000000002 to WiaEventNotifier
WIA: 23632.21468 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenConnectionToServer, Got my context 000001D650D2D810 from server

WIA: 23632.21468 0 0 0 [sti.dll] WiaEventReceiver::Start, WiaEventReceiver Started...
WIA: 4152.13564 6953 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration:
WIA: 4152.13564 6953 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 23632.21468 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 23632.21468 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:
WIA: 23632.24744 0 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 23632.21468 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 23632.24744 0 0 0 [sti.dll] AsyncRPCEventTransport::OpenNotificationChannel, Opening the async notification channel...
WIA: 4152.13564 6953 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Added new registration:
WIA: 4152.13564 6953 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 23632.21468 0 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 23632.21468 0 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Added new registration:
WIA: 23632.21468 0 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 4152.23692 6953 0 0 [wiaservc.dll] AsyncRPCEventClient::saveAsyncParams, Calling RpcServerSubscribeForNotification
WIA: 4152.23692 9828 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration:
WIA: 4152.23692 9828 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 23632.21468 2875 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 23632.21468 2875 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration:
WIA: 23632.21468 2875 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {A28BBADE-64B6-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 4152.23692 9828 2 0 [wiaservc.dll] WiaEventClient::RegisterUnregisterForEventNotification, Removed registration:
WIA: 4152.23692 9828 0 0 [wiaservc.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000000, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 23632.21468 2875 0 0 [sti.dll] AsyncRPCEventTransport::SendRegisterUnregisterInfo, Sent RPC Register/Unregister information.
WIA: 23632.21468 2875 0 0 [sti.dll] WiaEventReceiver::SendRegisterUnregisterInfo, Removed registration:
WIA: 23632.21468 2875 0 0 [sti.dll] EventRegistrationInfo::Dump, dwFlags: 0x00000002, guidEvent: {143E4E83-6497-11D2-A231-00C04FA31809}, bstrDeviceID: *, callback: 0x000001D6531FAE10
WIA: 23632.21468 2875 0 0 [sti.dll] WiaEventReceiver::Stop, WiaEventReceiver is stopping ...
WIA: 4152.23692 9828 2 0 [wiaservc.dll] CloseClientConnection, Closed connection for 0000000000000002
WIA: 4152.23692 9828 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002
WIA: 4152.23692 9828 2 0 [wiaservc.dll] WiaEventClient::MarkForRemoval, Client 0000000000000002 marked for removal
WIA: 23632.21468 2875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed Async connection to server
WIA: 4152.15848 9828 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 23632.21468 2875 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server
WIA: 4152.15848 9844 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcServerUnsubscribeForNotification
WIA: 4152.15848 9844 0 0 [wiaservc.dll] AsyncRPCEventClient::~AsyncRPCEventClient, Calling RpcAsyncAbortCall
WIA: 4152.15848 9844 80000000 0 [wiaservc.dll] WiaService::DecClientCount, Client reference counter decremented to 0
WIA: 23632.24744 2891 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Received notification to shutdown event thread!
WIA: 4152.15848 9844 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 23632.24744 2891 0 0 [sti.dll] WiaEventReceiver::EventThreadProc, Event Thread 0x000060A8 is now shut down
WIA: 23632.21468 2891 0 0 [sti.dll] DllEntryPoint, sti.dll (0x28F20000) received DLL_PROCESS_DETACH, process terminating: 1
WIA: 23632.21468 2891 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 23632.21468 2891 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server
WIA: 4152.13564 9859 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002
WIA: 4152.13564 9859 2 0 [wiaservc.dll] STI_CLIENT_CONTEXT_rundown, Rundown called for 0000000000000002
WIA: 4152.15848 9859 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 4152.15848 9859 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 4152.15848 39844 80000000 0 [wiaservc.dll] WiaService::CShutdownScheduledTask::StopServiceCallback, Attempting to shutdown service
WIA: 4152.15848 39844 2 0 [wiaservc.dll] SCMControlHandler::UpdateServiceStatus, Updating service status. CurrentState=SERVICE_STOP_PENDING, StateCode=3, WaitHint=0
WIA: 4152.14236 39844 80000000 0 [wiaservc.dll] Dispatcher::ClearEventHandlers, Clearing all event handlers from the Dispatcher
WIA: 4152.14236 39844 1 0 [wiaservc.dll] PowerEventHandler::~PowerEventHandler,  (000001EA5C6064C0)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] ServiceEventHandler::~ServiceEventHandler,  (000001EA5C606420)
WIA: 4152.14236 39844 80000000 0 [wiaservc.dll] Dispatcher::ClearEventSources, Clearing all event sources from the Dispatcher
WIA: 4152.14236 39844 1 0 [wiaservc.dll] Dispatcher::~Dispatcher,  (000001EA5C605E30)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] GenericEventSource::~GenericEventSource,  (000001EA5C606380)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] DeviceListManager::~DeviceListManager,  (000001EA5C606560)
WIA: 4152.14236 39844 80000000 0 [wiaservc.dll] DeviceListManager::ClearDevices, Clearing all Devices from the DeviceListManager
WIA: 4152.14236 39844 80000000 0 [wiaservc.dll] DeviceListManager::ClearEnumerators, Clearing all DeviceEnumerators from the DeviceListManager
WIA: 4152.14236 39844 1 0 [wiaservc.dll] RegistryDeviceEnumerator::~RegistryDeviceEnumerator,  (000001EA5C606B40)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] DeviceClassEnumeratorHandler::~DeviceClassEnumeratorHandler,  (000001EA5C606730)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] DeviceInfoSet::~DeviceInfoSet,  (000001EA5C606680)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] StiLockMgr::~StiLockMgr,  (000001EA5C606DA0)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] WiaEventNotifier::~WiaEventNotifier,  (000001EA5C606E10)
WIA: 4152.14236 39844 1 0 [wiaservc.dll] WiaService::~WiaService, ~WiaService (000001EA5C604DF0)
WIA: 4152.14236 39844 80000000 0 [wiaservc.dll] ShutdownWSDChallenge, Shutting down WSD Challenge: Unload DLL 1
WIA: 4152.15848 39844 0 0 [wiaservc.dll] SchedulerThread, SchedulerThread after calling WaitForMultipleObjects dwErr = 0x00000000
WIA: 4152.14236 39844 1 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler,  (000001EA5C605F00)
WIA: 4152.14236 39844 0 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Waiting for the control thread to terminate...
WIA: 4152.17548 39844 0 0 [wiaservc.dll] SCMControlHandler::ControlThread, Terminating control thread
WIA: 4152.14236 39844 2 0 [wiaservc.dll] SCMControlHandler::~SCMControlHandler, Updating service status. CurrentState=SERVICE_STOPPED, StateCode=1, WaitHint=0

**************** Started trace for Module: [sti.dll] in Executable [svchost.exe] ProcessID: [4152] at 2025/08/21 10:53:54:699 ****************
WIA: 4152.28176 39797 0 0 [sti.dll] DllEntryPoint, sti.dll (0x28F20000) received DLL_PROCESS_DETACH, process terminating: 1
WIA: 4152.28176 39797 0 0 [sti.dll] AsyncRPCEventTransport::CloseNotificationChannel, Closing the async notification channel...
WIA: 4152.28176 39797 0 0 [sti.dll] AsyncRPCEventTransport::CloseConnectionToServer, Closed connection to server

Youez - 2016 - github.com/yon3zu
LinuXploit