Time of Day Process Name PID Operation Path Result Detail 30:50.6 SketchUp.exe 9084 Process Start SUCCESS "Parent PID: 6380, Command line: ""C:\Program Files (x86)\SketchUp\SketchUp 2014\SketchUp.exe"" , Current directory: C:\windows\system32\, Environment: ; ALLUSERSPROFILE=C:\ProgramData ; APPDATA=C:\Users\Michael Armstrong\AppData\Roaming ; asl.log=Destination=file ; CCM_LOCATION_DATA_DESCRIPTION=Armstrong, Michael (FAA) ; CCM_LOCATION_DATA_SITECODE=Win7 LOB/ATO/ESA/GA/RTL HDQ/Computers/Secured Systems/Laptops ; CM2014DIR=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\ ; CommonProgramFiles=C:\Program Files\Common Files ; CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files ; CommonProgramW6432=C:\Program Files\Common Files ; COMPUTERNAME=JRTLRWL00122849 ; ComSpec=C:\windows\system32\cmd.exe ; DEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection ; DisplayLinkConfigRoot=C:\Program Files\DisplayLink Core Software\8.2.1646.0\ ; FP_NO_HOST_CHECK=NO ; HOMEDRIVE=H: ; HOMEPATH=\ ; HOMESHARE=\\IRTLROPVFI001.atoesa.faa.gov\users2$\Michael Armstrong ; ILBDIR=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\ ; LOCALAPPDATA=C:\Users\Michael Armstrong\AppData\Local ; LOGONSERVER=\\FAA-SO-DC01 ; NUMBER_OF_PROCESSORS=4 ; OS=Windows_NT ; Path=C:\Program Files (x86)\SketchUp\SketchUp 2014\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\Program Files\ActivIdentity\ActivClient\;C:\Program Files (x86)\ActivIdentity\ActivClient\;C:\Program Files\Tumbleweed\Desktop Validator\;C:\Program Files\Tumbleweed\Desktop Validator\x86;C:\windows\System32\WindowsPowerShell\v1.0\;C:\windows\System32\WindowsPowerShell\v1.0\;C:\windows\System32\WindowsPowerShell\v1.0\ ; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC ; PROCESSOR_ARCHITECTURE=AMD64 ; PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 61 Stepping 4, GenuineIntel ; PROCESSOR_LEVEL=6 ; PROCESSOR_REVISION=3d04 ; ProgramData=C:\ProgramData ; ProgramFiles=C:\Program Files ; ProgramFiles(x86)=C:\Program Files (x86) ; ProgramW6432=C:\Program Files ; PSModulePath=C:\windows\system32\WindowsPowerShell\v1.0\Modules\ ; PUBLIC=C:\Users\Public ; SystemDrive=C: ; SystemRoot=C:\windows ; TEMP=C:\Users\MICHAE~1\AppData\Local\Temp ; TMP=C:\Users\MICHAE~1\AppData\Local\Temp ; USERDNSDOMAIN=FAA.GOV ; USERDOMAIN=FAA ; USERNAME=Michael Armstrong ; USERPROFILE=C:\Users\Michael Armstrong ; VSEDEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection ; windir=C:\windows ; windows_tracing_flags=3 ; windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log" 30:50.6 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 8220 30:50.6 vf_agent.exe 4060 Load Image C:\Windows\System32\igfxCUIService.exe SUCCESS "Image Base: 0x13f510000, Image Size: 0x60000" 30:50.6 vf_agent.exe 4060 Load Image C:\Windows\System32\igfxCUIService.exe SUCCESS "Image Base: 0x13f510000, Image Size: 0x60000" 30:50.8 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Program Files (x86)\SketchUp\SketchUp 2014\SketchUp.exe SUCCESS Type: QueryLinks 30:50.8 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\SketchUp.exe SUCCESS "Image Base: 0xdb0000, Image Size: 0xe97000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\ntdll.dll SUCCESS "Image Base: 0x76e60000, Image Size: 0x1aa000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ntdll.dll SUCCESS "Image Base: 0x77040000, Image Size: 0x180000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\wow64.dll SUCCESS "Image Base: 0x742d0000, Image Size: 0x3f000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\wow64win.dll SUCCESS "Image Base: 0x74270000, Image Size: 0x5c000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\wow64cpu.dll SUCCESS "Image Base: 0x74260000, Image Size: 0x8000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\kernel32.dll SUCCESS "Image Base: 0x76c40000, Image Size: 0x11f000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\kernel32.dll SUCCESS "Image Base: 0x76410000, Image Size: 0x110000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\kernel32.dll SUCCESS "Image Base: 0x76c40000, Image Size: 0x11f000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\System32\user32.dll SUCCESS "Image Base: 0x76d60000, Image Size: 0xfa000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\kernel32.dll SUCCESS "Image Base: 0x76410000, Image Size: 0x110000" 30:50.8 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\KernelBase.dll SUCCESS "Image Base: 0x76690000, Image Size: 0x47000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\winmm.dll SUCCESS "Image Base: 0x67bf0000, Image Size: 0x32000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msvcrt.dll SUCCESS "Image Base: 0x750d0000, Image Size: 0xac000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\user32.dll SUCCESS "Image Base: 0x74fc0000, Image Size: 0x100000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\gdi32.dll SUCCESS "Image Base: 0x74940000, Image Size: 0x90000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\lpk.dll SUCCESS "Image Base: 0x75f40000, Image Size: 0xa000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\usp10.dll SUCCESS "Image Base: 0x76730000, Image Size: 0x9d000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\advapi32.dll SUCCESS "Image Base: 0x74c20000, Image Size: 0xa1000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\sechost.dll SUCCESS "Image Base: 0x75180000, Image Size: 0x19000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\rpcrt4.dll SUCCESS "Image Base: 0x767d0000, Image Size: 0xf0000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\sspicli.dll SUCCESS "Image Base: 0x748e0000, Image Size: 0x60000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\cryptbase.dll SUCCESS "Image Base: 0x748d0000, Image Size: 0xc000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\wininet.dll SUCCESS "Image Base: 0x76990000, Image Size: 0x2ab000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll SUCCESS "Image Base: 0x750c0000, Image Size: 0x4000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll SUCCESS "Image Base: 0x77010000, Image Size: 0x4000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\shlwapi.dll SUCCESS "Image Base: 0x75240000, Image Size: 0x57000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll SUCCESS "Image Base: 0x74e60000, Image Size: 0x4000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\version.dll SUCCESS "Image Base: 0x741a0000, Image Size: 0x9000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll SUCCESS "Image Base: 0x74e50000, Image Size: 0x3000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\normaliz.dll SUCCESS "Image Base: 0x763d0000, Image Size: 0x3000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\iertutil.dll SUCCESS "Image Base: 0x749d0000, Image Size: 0x235000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll SUCCESS "Image Base: 0x76720000, Image Size: 0x5000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\userenv.dll SUCCESS "Image Base: 0x76610000, Image Size: 0x17000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\profapi.dll SUCCESS "Image Base: 0x763e0000, Image Size: 0xb000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\wsock32.dll SUCCESS "Image Base: 0x6c8a0000, Image Size: 0x7000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ws2_32.dll SUCCESS "Image Base: 0x766e0000, Image Size: 0x35000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\nsi.dll SUCCESS "Image Base: 0x74c10000, Image Size: 0x6000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\opengl32.dll SUCCESS "Image Base: 0x5aa10000, Image Size: 0xc8000" 30:50.9 Explorer.EXE 6380 Thread Exit SUCCESS "Thread ID: 2592, User Time: 0.0624004, Kernel Time: 0.1248008" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\glu32.dll SUCCESS "Image Base: 0x5ade0000, Image Size: 0x22000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ddraw.dll SUCCESS "Image Base: 0x5a590000, Image Size: 0xe7000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\dciman32.dll SUCCESS "Image Base: 0x67a80000, Image Size: 0x6000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\setupapi.dll SUCCESS "Image Base: 0x760e0000, Image Size: 0x19d000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\cfgmgr32.dll SUCCESS "Image Base: 0x760b0000, Image Size: 0x27000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\oleaut32.dll SUCCESS "Image Base: 0x768c0000, Image Size: 0x91000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ole32.dll SUCCESS "Image Base: 0x75f50000, Image Size: 0x15d000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\devobj.dll SUCCESS "Image Base: 0x763f0000, Image Size: 0x12000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\dwmapi.dll SUCCESS "Image Base: 0x646e0000, Image Size: 0x13000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\BugSplat.dll SUCCESS "Image Base: 0x10000000, Image Size: 0x3d000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\urlmon.dll SUCCESS "Image Base: 0x76280000, Image Size: 0x14b000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll SUCCESS "Image Base: 0x74e30000, Image Size: 0x4000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\crypt32.dll SUCCESS "Image Base: 0x74d00000, Image Size: 0x121000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msasn1.dll SUCCESS "Image Base: 0x74e40000, Image Size: 0xc000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_Db_3.08_10.dll SUCCESS "Image Base: 0x1c50000, Image Size: 0x845000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_DbRoot_3.08_10.dll SUCCESS "Image Base: 0x5a530000, Image Size: 0x53000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_Gi_3.08_10.dll SUCCESS "Image Base: 0x5a440000, Image Size: 0xe6000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_SpatialIndex_3.08_10.dll SUCCESS "Image Base: 0x5eae0000, Image Size: 0xc000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_Ge_3.08_10.dll SUCCESS "Image Base: 0x5a160000, Image Size: 0xf8000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_Root_3.08_10.dll SUCCESS "Image Base: 0x5a360000, Image Size: 0x96000" 30:50.9 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\TD_Alloc_3.08_10.dll SUCCESS "Image Base: 0x5ead0000, Image Size: 0x6000" 30:50.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msvcr100.dll SUCCESS "Image Base: 0x59d60000, Image Size: 0xbf000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msvcp100.dll SUCCESS "Image Base: 0x59cf0000, Image Size: 0x69000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\sisl.dll SUCCESS "Image Base: 0x58db0000, Image Size: 0xcb000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\IGCore.dll SUCCESS "Image Base: 0x57a70000, Image Size: 0x18a000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\IGSg.dll SUCCESS "Image Base: 0x51220000, Image Size: 0x1ab000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\IGAttrs.dll SUCCESS "Image Base: 0x572d0000, Image Size: 0xec000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\IGGfx.dll SUCCESS "Image Base: 0xf510000, Image Size: 0x3be000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\IGUtils.dll SUCCESS "Image Base: 0x57a10000, Image Size: 0x5d000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\IGMath.dll SUCCESS "Image Base: 0x3d0000, Image Size: 0xc9000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\mfc100u.dll SUCCESS "Image Base: 0x78520000, Image Size: 0x43f000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll SUCCESS "Image Base: 0x69860000, Image Size: 0x84000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msimg32.dll SUCCESS "Image Base: 0x66390000, Image Size: 0x5000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\comdlg32.dll SUCCESS "Image Base: 0x74f40000, Image Size: 0x7b000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\shell32.dll SUCCESS "Image Base: 0x752a0000, Image Size: 0xc4c000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\msvcrt-ruby200.dll SUCCESS "Image Base: 0x66780000, Image Size: 0x258000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\imagehlp.dll SUCCESS "Image Base: 0x74cd0000, Image Size: 0x2b000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\mpr.dll SUCCESS "Image Base: 0x6dba0000, Image Size: 0x12000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\avcodec-54.dll SUCCESS "Image Base: 0x6a0c0000, Image Size: 0xe8d000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\libogg-0.dll SUCCESS "Image Base: 0x70680000, Image Size: 0x1b000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\libtheoradec-1.dll SUCCESS "Image Base: 0x65b40000, Image Size: 0x23000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\libtheoraenc-1.dll SUCCESS "Image Base: 0x63100000, Image Size: 0x50000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\avutil-52.dll SUCCESS "Image Base: 0x66d80000, Image Size: 0x38000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\swscale-2.dll SUCCESS "Image Base: 0x2a0000, Image Size: 0x56000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\avformat-54.dll SUCCESS "Image Base: 0x69900000, Image Size: 0x15d000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\alchemyext.dll SUCCESS "Image Base: 0x5a9e0000, Image Size: 0x30000" 30:51.0 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\gdal16.dll SUCCESS "Image Base: 0x630000, Image Size: 0x2a7000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\apphelp.dll SUCCESS "Image Base: 0x69690000, Image Size: 0x4c000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\AppPatch\AcLayers.dll SUCCESS "Image Base: 0x55420000, Image Size: 0x8d000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\winspool.drv SUCCESS "Image Base: 0x6deb0000, Image Size: 0x51000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\AppPatch\AcGenral.dll SUCCESS "Image Base: 0x25c0000, Image Size: 0x219000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\uxtheme.dll SUCCESS "Image Base: 0x64700000, Image Size: 0x80000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\samcli.dll SUCCESS "Image Base: 0x72e00000, Image Size: 0xf000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msacm32.dll SUCCESS "Image Base: 0x55360000, Image Size: 0x14000" 30:51.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\sfc.dll SUCCESS "Image Base: 0x576e0000, Image Size: 0x3000" 30:51.1 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\sfc_os.dll SUCCESS "Image Base: 0x576d0000, Image Size: 0xd000" 30:51.1 SketchUp.exe 9084 Load Image C:\Windows\AppPatch\AcXtrnal.dll SUCCESS "Image Base: 0x2ab20000, Image Size: 0x259000" 30:51.1 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\SketchUp.exe SUCCESS "Image Base: 0x2ac0000, Image Size: 0xe97000" 30:51.2 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\shunimpl.dll SUCCESS "Image Base: 0x5a920000, Image Size: 0x6000" 30:51.2 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\SortServer2003Compat.dll SUCCESS "Image Base: 0x5a910000, Image Size: 0xd000" 30:51.2 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\imm32.dll SUCCESS "Image Base: 0x76630000, Image Size: 0x60000" 30:51.2 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\msctf.dll SUCCESS "Image Base: 0x74e70000, Image Size: 0xcd000" 30:51.2 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\mfc100enu.dll SUCCESS "Image Base: 0x5a430000, Image Size: 0xd000" 30:51.2 vf_agent.exe 4060 Load Image C:\Program Files\DisplayLink Core Software\8.2.1646.0\DisplayLinkManager.exe SUCCESS "Image Base: 0x6380000, Image Size: 0xbf9000" 30:51.2 vf_agent.exe 4060 Load Image C:\Program Files\DisplayLink Core Software\8.2.1646.0\DisplayLinkManager.exe SUCCESS "Image Base: 0x6380000, Image Size: 0xbf9000" 30:51.4 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\shfolder.dll SUCCESS "Image Base: 0x6db90000, Image Size: 0x5000" 30:51.4 HPLaserJetService.exe 2720 Thread Create SUCCESS Thread ID: 8992 30:51.4 HPLaserJetService.exe 2720 Thread Exit SUCCESS "Thread ID: 8992, User Time: 0.0000000, Kernel Time: 0.0156001" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\nlaapi.dll SUCCESS "Image Base: 0x69480000, Image Size: 0x10000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\NapiNSP.dll SUCCESS "Image Base: 0x69470000, Image Size: 0x10000" 30:51.6 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 9920 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\pnrpnsp.dll SUCCESS "Image Base: 0x69340000, Image Size: 0x12000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\mswsock.dll SUCCESS "Image Base: 0x6bb40000, Image Size: 0x3c000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\dnsapi.dll SUCCESS "Image Base: 0x73e90000, Image Size: 0x44000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\winrnr.dll SUCCESS "Image Base: 0x69450000, Image Size: 0x8000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\wshbth.dll SUCCESS "Image Base: 0x69300000, Image Size: 0xd000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ws2_32.dll SUCCESS "Image Base: 0xd70000, Image Size: 0x35000" 30:51.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\WSHTCPIP.DLL SUCCESS "Image Base: 0x6bb30000, Image Size: 0x5000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\wship6.dll SUCCESS "Image Base: 0x694b0000, Image Size: 0x6000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\IPHLPAPI.DLL SUCCESS "Image Base: 0x73f70000, Image Size: 0x1c000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\winnsi.dll SUCCESS "Image Base: 0x73f60000, Image Size: 0x7000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\rasadhlp.dll SUCCESS "Image Base: 0x692f0000, Image Size: 0x6000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\FWPUCLNT.DLL SUCCESS "Image Base: 0x73e50000, Image Size: 0x38000" 30:51.7 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 9668 30:51.7 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 3612 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\cryptsp.dll SUCCESS "Image Base: 0x74150000, Image Size: 0x17000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\rsaenh.dll SUCCESS "Image Base: 0x74110000, Image Size: 0x3b000" 30:51.7 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS "Image Base: 0x74100000, Image Size: 0xe000" 30:51.7 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 6396 30:51.7 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 9720 30:51.8 SketchUp.exe 9084 Load Image C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23894_none_5c0be957a009922e\GdiPlus.dll SUCCESS "Image Base: 0x64e60000, Image Size: 0x191000" 30:51.8 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 9848 30:51.8 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\WindowsCodecs.dll SUCCESS "Image Base: 0x51c60000, Image Size: 0x131000" 30:52.0 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe SUCCESS "Image Base: 0x1c50000, Image Size: 0x4b000" 30:52.0 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe SUCCESS "Image Base: 0x1c50000, Image Size: 0x4b000" 30:52.2 SketchUp.exe 9084 Load Image C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll SUCCESS "Image Base: 0x680c0000, Image Size: 0x19e000" 30:52.2 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe SUCCESS "Image Base: 0x1c50000, Image Size: 0x4b000" 30:52.2 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe SUCCESS "Image Base: 0x1c50000, Image Size: 0x4b000" 30:52.6 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ole32.dll SUCCESS "Image Base: 0x6f50000, Image Size: 0x15d000" 30:52.7 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe SUCCESS "Image Base: 0x6380000, Image Size: 0x15d000" 30:52.7 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe SUCCESS "Image Base: 0x6380000, Image Size: 0x15d000" 30:52.9 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe SUCCESS "Image Base: 0x6380000, Image Size: 0x15d000" 30:52.9 vf_agent.exe 4060 Load Image C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe SUCCESS "Image Base: 0x6380000, Image Size: 0x15d000" 30:53.0 lync.exe 428 Thread Create SUCCESS Thread ID: 7356 30:53.0 RAVBg64.exe 8268 Thread Create SUCCESS Thread ID: 9420 30:53.0 RAVBg64.exe 8268 Thread Create SUCCESS Thread ID: 9516 30:53.8 HPLaserJetService.exe 2720 Thread Create SUCCESS Thread ID: 7764 30:53.8 HPLaserJetService.exe 2720 Thread Exit SUCCESS "Thread ID: 7764, User Time: 0.0000000, Kernel Time: 0.0156001" 30:53.9 vf_agent.exe 4060 Load Image C:\Program Files\DisplayLink Core Software\8.2.1646.0\DisplayLinkUserAgent.exe SUCCESS "Image Base: 0x13f940000, Image Size: 0x1ac000" 30:53.9 vf_agent.exe 4060 Load Image C:\Program Files\DisplayLink Core Software\8.2.1646.0\DisplayLinkUserAgent.exe SUCCESS "Image Base: 0x13f940000, Image Size: 0x1ac000" 30:53.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\ig8icd32.dll SUCCESS "Image Base: 0x7f20000, Image Size: 0x9ea000" 30:53.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\igdusc32.dll SUCCESS "Image Base: 0x55580000, Image Size: 0x8cb000" 30:53.9 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\wtsapi32.dll SUCCESS "Image Base: 0x73f90000, Image Size: 0xd000" 30:54.0 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 5492 30:54.0 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 9776 30:54.0 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 2320 30:54.0 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 6572 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\ig8icd32.dll SUCCESS "Image Base: 0x6e20000, Image Size: 0x9ea000" 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\opengl32.dll SUCCESS "Image Base: 0x5aa10000, Image Size: 0xc8000" 30:54.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\winsta.dll SUCCESS "Image Base: 0x73de0000, Image Size: 0x29000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\ig8icd32.dll SUCCESS "Image Base: 0xfcf0000, Image Size: 0x9ea000" 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\glu32.dll SUCCESS "Image Base: 0x5ade0000, Image Size: 0x22000" 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\ddraw.dll SUCCESS "Image Base: 0x5a590000, Image Size: 0xe7000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\opengl32.dll SUCCESS "Image Base: 0x5aa10000, Image Size: 0xc8000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\glu32.dll SUCCESS "Image Base: 0x5ade0000, Image Size: 0x22000" 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\dciman32.dll SUCCESS "Image Base: 0x67a80000, Image Size: 0x6000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\ddraw.dll SUCCESS "Image Base: 0x5a590000, Image Size: 0xe7000" 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\igdusc32.dll SUCCESS "Image Base: 0x55580000, Image Size: 0x8cb000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\dciman32.dll SUCCESS "Image Base: 0x67a80000, Image Size: 0x6000" 30:54.0 concentr.exe 8064 Load Image C:\Windows\SysWOW64\wtsapi32.dll SUCCESS "Image Base: 0x73f90000, Image Size: 0xd000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\igdusc32.dll SUCCESS "Image Base: 0x55580000, Image Size: 0x8cb000" 30:54.0 BESClientUI.exe 9188 Load Image C:\Windows\SysWOW64\wtsapi32.dll SUCCESS "Image Base: 0x73f90000, Image Size: 0xd000" 30:54.0 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\mscms.dll SUCCESS "Image Base: 0x57730000, Image Size: 0x79000" 30:54.1 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\BugSplatRc.dll SUCCESS "Image Base: 0x5a330000, Image Size: 0x30000" 30:54.1 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 9284 30:54.1 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\dbghelp.dll SUCCESS "Image Base: 0xcba0000, Image Size: 0x10b000" 30:54.1 vf_agent.exe 4060 Load Image C:\Program Files\DisplayLink Core Software\8.2.1646.0\DisplayLinkUserAgent.exe SUCCESS "Image Base: 0x13f940000, Image Size: 0x1ac000" 30:54.1 vf_agent.exe 4060 Load Image C:\Program Files\DisplayLink Core Software\8.2.1646.0\DisplayLinkUserAgent.exe SUCCESS "Image Base: 0x13f940000, Image Size: 0x1ac000" 30:54.2 SketchUp.exe 9084 Load Image C:\Windows\SysWOW64\psapi.dll SUCCESS "Image Base: 0x751a0000, Image Size: 0x5000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\ig8icd32.dll SUCCESS "Image Base: 0x4610000, Image Size: 0x9ea000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\opengl32.dll SUCCESS "Image Base: 0x5aa10000, Image Size: 0xc8000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\glu32.dll SUCCESS "Image Base: 0x5ade0000, Image Size: 0x22000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\ddraw.dll SUCCESS "Image Base: 0x5a590000, Image Size: 0xe7000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\dciman32.dll SUCCESS "Image Base: 0x67a80000, Image Size: 0x6000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\igdusc32.dll SUCCESS "Image Base: 0x55580000, Image Size: 0x8cb000" 30:54.3 AtHocGov.exe 8004 Load Image C:\Windows\SysWOW64\wtsapi32.dll SUCCESS "Image Base: 0x73f90000, Image Size: 0xd000" 30:54.3 DllHost.exe 3780 Thread Exit SUCCESS "Thread ID: 8628, User Time: 0.0000000, Kernel Time: 0.0000000" 30:54.3 DllHost.exe 3780 Thread Exit SUCCESS "Thread ID: 2456, User Time: 0.0000000, Kernel Time: 0.0156001" 30:54.3 DllHost.exe 3780 Thread Exit SUCCESS "Thread ID: 10000, User Time: 0.0000000, Kernel Time: 0.0000000" 30:54.3 DllHost.exe 3780 Thread Exit SUCCESS "Thread ID: 2236, User Time: 0.0000000, Kernel Time: 0.0000000" 30:54.3 DllHost.exe 3780 Thread Exit SUCCESS "Thread ID: 6252, User Time: 0.0156001, Kernel Time: 0.0156001" 30:54.3 DllHost.exe 3780 Thread Exit SUCCESS "Thread ID: 2888, User Time: 0.0000000, Kernel Time: 0.0000000" 30:54.5 DllHost.exe 3780 Process Exit SUCCESS "Exit Status: 0, User Time: 0.0156001 seconds, Kernel Time: 0.0312002 seconds, Private Bytes: 1,937,408, Peak Private Bytes: 2,387,968, Working Set: 6,496,256, Peak Working Set: 7,196,672" 30:54.8 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 9284, User Time: 0.0468003, Kernel Time: 0.4212027" 30:54.8 SketchUp.exe 9084 Thread Create SUCCESS Thread ID: 8932 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\ig8icd32.dll SUCCESS "Image Base: 0xfcf0000, Image Size: 0x9ea000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\opengl32.dll SUCCESS "Image Base: 0x5aa10000, Image Size: 0xc8000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\glu32.dll SUCCESS "Image Base: 0x5ade0000, Image Size: 0x22000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\ddraw.dll SUCCESS "Image Base: 0x5a590000, Image Size: 0xe7000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\dciman32.dll SUCCESS "Image Base: 0x67a80000, Image Size: 0x6000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\setupapi.dll SUCCESS "Image Base: 0x760e0000, Image Size: 0x19d000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\cfgmgr32.dll SUCCESS "Image Base: 0x760b0000, Image Size: 0x27000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\devobj.dll SUCCESS "Image Base: 0x763f0000, Image Size: 0x12000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\igdusc32.dll SUCCESS "Image Base: 0x55580000, Image Size: 0x8cb000" 30:54.9 rundll32.exe 8020 Load Image C:\Windows\SysWOW64\wtsapi32.dll SUCCESS "Image Base: 0x73f90000, Image Size: 0xd000" 30:55.0 DllHost.exe 3392 Thread Exit SUCCESS "Thread ID: 7508, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.0 DllHost.exe 3392 Thread Exit SUCCESS "Thread ID: 9424, User Time: 0.0156001, Kernel Time: 0.0156001" 30:55.0 DllHost.exe 3392 Thread Exit SUCCESS "Thread ID: 1328, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.0 DllHost.exe 3392 Thread Exit SUCCESS "Thread ID: 6348, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.0 DllHost.exe 3392 Thread Exit SUCCESS "Thread ID: 8552, User Time: 0.0000000, Kernel Time: 0.0156001" 30:55.0 DllHost.exe 3392 Thread Exit SUCCESS "Thread ID: 2224, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.0 DllHost.exe 3392 Process Exit SUCCESS "Exit Status: 0, User Time: 0.0156001 seconds, Kernel Time: 0.0312002 seconds, Private Bytes: 1,650,688, Peak Private Bytes: 2,072,576, Working Set: 5,840,896, Peak Working Set: 6,483,968" 30:55.0 taskhost.exe 6784 Thread Exit SUCCESS "Thread ID: 6152, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.2 McTray.exe 7548 Load Image C:\Windows\SysWOW64\ig8icd32.dll SUCCESS "Image Base: 0x5d10000, Image Size: 0x9ea000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\opengl32.dll SUCCESS "Image Base: 0x5aa10000, Image Size: 0xc8000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\glu32.dll SUCCESS "Image Base: 0x5ade0000, Image Size: 0x22000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\ddraw.dll SUCCESS "Image Base: 0x5a590000, Image Size: 0xe7000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\dciman32.dll SUCCESS "Image Base: 0x67a80000, Image Size: 0x6000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\setupapi.dll SUCCESS "Image Base: 0x760e0000, Image Size: 0x19d000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\cfgmgr32.dll SUCCESS "Image Base: 0x760b0000, Image Size: 0x27000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\devobj.dll SUCCESS "Image Base: 0x763f0000, Image Size: 0x12000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\igdusc32.dll SUCCESS "Image Base: 0x55580000, Image Size: 0x8cb000" 30:55.3 McTray.exe 7548 Load Image C:\Windows\SysWOW64\wtsapi32.dll SUCCESS "Image Base: 0x73f90000, Image Size: 0xd000" 30:55.3 SketchUp.exe 9084 Process Create C:\Program Files (x86)\SketchUp\SketchUp 2014\BsSndRpt.exe SUCCESS "PID: 9860, Command line: ""BsSndRpt.exe"" /i ""C:\Users\MICHAE~1\AppData\Local\Temp\BsSndRpt.ini"" /dl" 30:55.3 BsSndRpt.exe 9860 Process Start SUCCESS "Parent PID: 9084, Command line: ""BsSndRpt.exe"" /i ""C:\Users\MICHAE~1\AppData\Local\Temp\BsSndRpt.ini"" /dl, Current directory: C:\windows\system32\, Environment: ; ALLUSERSPROFILE=C:\ProgramData ; APPDATA=C:\Users\Michael Armstrong\AppData\Roaming ; asl.log=Destination=file ; CCM_LOCATION_DATA_DESCRIPTION=Armstrong, Michael (FAA) ; CCM_LOCATION_DATA_SITECODE=Win7 LOB/ATO/ESA/GA/RTL HDQ/Computers/Secured Systems/Laptops ; CM2014DIR=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\ ; CommonProgramFiles=C:\Program Files (x86)\Common Files ; CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files ; CommonProgramW6432=C:\Program Files\Common Files ; COMPUTERNAME=JRTLRWL00122849 ; ComSpec=C:\windows\system32\cmd.exe ; DEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection ; DisplayLinkConfigRoot=C:\Program Files\DisplayLink Core Software\8.2.1646.0\ ; FP_NO_HOST_CHECK=NO ; HOMEDRIVE=H: ; HOMEPATH=\ ; HOMESHARE=\\IRTLROPVFI001.atoesa.faa.gov\users2$\Michael Armstrong ; ILBDIR=C:\Program Files (x86)\Common Files\Autodesk Shared\Materials\ ; LOCALAPPDATA=C:\Users\Michael Armstrong\AppData\Local ; LOGONSERVER=\\FAA-SO-DC01 ; NUMBER_OF_PROCESSORS=4 ; OS=Windows_NT ; Path=C:\Program Files (x86)\SketchUp\SketchUp 2014\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\Program Files\ActivIdentity\ActivClient\;C:\Program Files (x86)\ActivIdentity\ActivClient\;C:\Program Files\Tumbleweed\Desktop Validator\;C:\Program Files\Tumbleweed\Desktop Validator\x86;C:\windows\System32\WindowsPowerShell\v1.0\;C:\windows\System32\WindowsPowerShell\v1.0\;C:\windows\System32\WindowsPowerShell\v1.0\ ; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC ; PROCESSOR_ARCHITECTURE=x86 ; PROCESSOR_ARCHITEW6432=AMD64 ; PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 61 Stepping 4, GenuineIntel ; PROCESSOR_LEVEL=6 ; PROCESSOR_REVISION=3d04 ; ProgramData=C:\ProgramData ; ProgramFiles=C:\Program Files (x86) ; ProgramFiles(x86)=C:\Program Files (x86) ; ProgramW6432=C:\Program Files ; PSModulePath=C:\windows\system32\WindowsPowerShell\v1.0\Modules\ ; PUBLIC=C:\Users\Public ; SystemDrive=C: ; SystemRoot=C:\windows ; TEMP=C:\Users\MICHAE~1\AppData\Local\Temp ; TMP=C:\Users\MICHAE~1\AppData\Local\Temp ; USERDNSDOMAIN=FAA.GOV ; USERDOMAIN=FAA ; USERNAME=Michael Armstrong ; USERPROFILE=C:\Users\Michael Armstrong ; VSEDEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection ; windir=C:\windows ; windows_tracing_flags=3 ; windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log ; __COMPAT_LAYER=WinXPSp3" 30:55.3 BsSndRpt.exe 9860 Thread Create SUCCESS Thread ID: 9336 30:55.3 SketchUp.exe 9084 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\BsSndRpt.exe SUCCESS "Image Base: 0xcb10000, Image Size: 0x49000" 30:55.3 svchost.exe 2208 Thread Create SUCCESS Thread ID: 1516 30:55.3 svchost.exe 652 Thread Exit SUCCESS "Thread ID: 5832, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 BsSndRpt.exe 9860 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\BsSndRpt.exe SUCCESS "Image Base: 0x400000, Image Size: 0x49000" 30:55.3 BsSndRpt.exe 9860 Load Image C:\Windows\System32\ntdll.dll SUCCESS "Image Base: 0x76e60000, Image Size: 0x1aa000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 8932, User Time: 0.0000000, Kernel Time: 0.0312002" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 8220, User Time: 1.6380105, Kernel Time: 1.2948083" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 6572, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 9848, User Time: 0.0000000, Kernel Time: 0.0156001" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 5492, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 9668, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 2320, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 3612, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\ntdll.dll SUCCESS "Image Base: 0x77040000, Image Size: 0x180000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 9720, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 9920, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 9776, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.3 SketchUp.exe 9084 Thread Exit SUCCESS "Thread ID: 6396, User Time: 0.0000000, Kernel Time: 0.0000000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\System32\wow64.dll SUCCESS "Image Base: 0x742d0000, Image Size: 0x3f000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\System32\wow64win.dll SUCCESS "Image Base: 0x74270000, Image Size: 0x5c000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\System32\wow64cpu.dll SUCCESS "Image Base: 0x74260000, Image Size: 0x8000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\System32\kernel32.dll SUCCESS "Image Base: 0x76c40000, Image Size: 0x11f000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\kernel32.dll SUCCESS "Image Base: 0x76410000, Image Size: 0x110000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\System32\kernel32.dll SUCCESS "Image Base: 0x76c40000, Image Size: 0x11f000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\System32\user32.dll SUCCESS "Image Base: 0x76d60000, Image Size: 0xfa000" 30:55.4 SketchUp.exe 9084 Process Exit SUCCESS "Exit Status: -3, User Time: 1.6848108 seconds, Kernel Time: 1.7784114 seconds, Private Bytes: 76,705,792, Peak Private Bytes: 133,070,848, Working Set: 87,146,496, Peak Working Set: 94,445,568" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\kernel32.dll SUCCESS "Image Base: 0x76410000, Image Size: 0x110000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\KernelBase.dll SUCCESS "Image Base: 0x76690000, Image Size: 0x47000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\shlwapi.dll SUCCESS "Image Base: 0x75240000, Image Size: 0x57000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\gdi32.dll SUCCESS "Image Base: 0x74940000, Image Size: 0x90000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\user32.dll SUCCESS "Image Base: 0x74fc0000, Image Size: 0x100000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\advapi32.dll SUCCESS "Image Base: 0x74c20000, Image Size: 0xa1000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\msvcrt.dll SUCCESS "Image Base: 0x750d0000, Image Size: 0xac000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\sechost.dll SUCCESS "Image Base: 0x75180000, Image Size: 0x19000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\rpcrt4.dll SUCCESS "Image Base: 0x767d0000, Image Size: 0xf0000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\sspicli.dll SUCCESS "Image Base: 0x748e0000, Image Size: 0x60000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\cryptbase.dll SUCCESS "Image Base: 0x748d0000, Image Size: 0xc000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\lpk.dll SUCCESS "Image Base: 0x75f40000, Image Size: 0xa000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\usp10.dll SUCCESS "Image Base: 0x76730000, Image Size: 0x9d000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\wininet.dll SUCCESS "Image Base: 0x76990000, Image Size: 0x2ab000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll SUCCESS "Image Base: 0x750c0000, Image Size: 0x4000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll SUCCESS "Image Base: 0x77010000, Image Size: 0x4000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll SUCCESS "Image Base: 0x74e60000, Image Size: 0x4000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\version.dll SUCCESS "Image Base: 0x741a0000, Image Size: 0x9000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll SUCCESS "Image Base: 0x74e50000, Image Size: 0x3000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\normaliz.dll SUCCESS "Image Base: 0x763d0000, Image Size: 0x3000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\iertutil.dll SUCCESS "Image Base: 0x749d0000, Image Size: 0x235000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll SUCCESS "Image Base: 0x76720000, Image Size: 0x5000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\userenv.dll SUCCESS "Image Base: 0x76610000, Image Size: 0x17000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\profapi.dll SUCCESS "Image Base: 0x763e0000, Image Size: 0xb000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\ws2_32.dll SUCCESS "Image Base: 0x766e0000, Image Size: 0x35000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\nsi.dll SUCCESS "Image Base: 0x74c10000, Image Size: 0x6000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\shell32.dll SUCCESS "Image Base: 0x752a0000, Image Size: 0xc4c000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\ole32.dll SUCCESS "Image Base: 0x75f50000, Image Size: 0x15d000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\oleaut32.dll SUCCESS "Image Base: 0x768c0000, Image Size: 0x91000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll SUCCESS "Image Base: 0x69860000, Image Size: 0x84000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\apphelp.dll SUCCESS "Image Base: 0x69690000, Image Size: 0x4c000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\AppPatch\AcLayers.dll SUCCESS "Image Base: 0x55420000, Image Size: 0x8d000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\winspool.drv SUCCESS "Image Base: 0x6deb0000, Image Size: 0x51000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\mpr.dll SUCCESS "Image Base: 0x6dba0000, Image Size: 0x12000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\AppPatch\AcGenral.dll SUCCESS "Image Base: 0x579e0000, Image Size: 0x219000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\uxtheme.dll SUCCESS "Image Base: 0x64700000, Image Size: 0x80000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\winmm.dll SUCCESS "Image Base: 0x67bf0000, Image Size: 0x32000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\samcli.dll SUCCESS "Image Base: 0x72e00000, Image Size: 0xf000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\msacm32.dll SUCCESS "Image Base: 0x55360000, Image Size: 0x14000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\sfc.dll SUCCESS "Image Base: 0x576e0000, Image Size: 0x3000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\sfc_os.dll SUCCESS "Image Base: 0x576d0000, Image Size: 0xd000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\dwmapi.dll SUCCESS "Image Base: 0x646e0000, Image Size: 0x13000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\setupapi.dll SUCCESS "Image Base: 0x760e0000, Image Size: 0x19d000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\cfgmgr32.dll SUCCESS "Image Base: 0x760b0000, Image Size: 0x27000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\devobj.dll SUCCESS "Image Base: 0x763f0000, Image Size: 0x12000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\urlmon.dll SUCCESS "Image Base: 0x76280000, Image Size: 0x14b000" 30:55.4 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll SUCCESS "Image Base: 0x74e30000, Image Size: 0x4000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\AppPatch\AcXtrnal.dll SUCCESS "Image Base: 0x2af60000, Image Size: 0x259000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\BsSndRpt.exe SUCCESS "Image Base: 0x330000, Image Size: 0x49000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\shunimpl.dll SUCCESS "Image Base: 0x5eae0000, Image Size: 0x6000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\SortServer2003Compat.dll SUCCESS "Image Base: 0x5ead0000, Image Size: 0xd000" 30:55.5 vf_agent.exe 4060 Load Image C:\Windows\System32\svchost.exe SUCCESS "Image Base: 0xff3e0000, Image Size: 0xb000" 30:55.5 vf_agent.exe 4060 Load Image C:\Windows\System32\svchost.exe SUCCESS "Image Base: 0xff3e0000, Image Size: 0xb000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\imm32.dll SUCCESS "Image Base: 0x76630000, Image Size: 0x60000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\msctf.dll SUCCESS "Image Base: 0x74e70000, Image Size: 0xcd000" 30:55.5 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Windows\System32\svchost.exe BUFFER OVERFLOW Type: QueryLinks 30:55.5 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Windows\System32\svchost.exe SUCCESS Type: QueryLinks 30:55.5 BsSndRpt.exe 9860 Load Image C:\Program Files (x86)\SketchUp\SketchUp 2014\BugSplatRc.dll SUCCESS "Image Base: 0x5a9e0000, Image Size: 0x30000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\nlaapi.dll SUCCESS "Image Base: 0x69480000, Image Size: 0x10000" 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\NapiNSP.dll SUCCESS "Image Base: 0x69470000, Image Size: 0x10000" 30:55.5 BsSndRpt.exe 9860 Thread Create SUCCESS Thread ID: 1636 30:55.5 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\pnrpnsp.dll SUCCESS "Image Base: 0x69340000, Image Size: 0x12000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\mswsock.dll SUCCESS "Image Base: 0x6bb40000, Image Size: 0x3c000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\dnsapi.dll SUCCESS "Image Base: 0x73e90000, Image Size: 0x44000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\winrnr.dll SUCCESS "Image Base: 0x69450000, Image Size: 0x8000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\wshbth.dll SUCCESS "Image Base: 0x69300000, Image Size: 0xd000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\IPHLPAPI.DLL SUCCESS "Image Base: 0x73f70000, Image Size: 0x1c000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\winnsi.dll SUCCESS "Image Base: 0x73f60000, Image Size: 0x7000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\FWPUCLNT.DLL SUCCESS "Image Base: 0x73e50000, Image Size: 0x38000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\rasadhlp.dll SUCCESS "Image Base: 0x692f0000, Image Size: 0x6000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll SUCCESS "Image Base: 0x680c0000, Image Size: 0x19e000" 30:55.6 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\ole32.dll SUCCESS "Image Base: 0x2db0000, Image Size: 0x15d000" 30:56.0 HPLaserJetService.exe 2720 Thread Create SUCCESS Thread ID: 9608 30:56.0 HPLaserJetService.exe 2720 Thread Exit SUCCESS "Thread ID: 9608, User Time: 0.0000000, Kernel Time: 0.0156001" 30:56.2 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.2 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.2 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS Type: QueryLinks 30:56.2 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.2 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.2 java.exe 2036 Thread Create SUCCESS Thread ID: 5736 30:56.4 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.4 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.4 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS Type: QueryLinks 30:56.4 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:56.4 vf_agent.exe 4060 Load Image C:\Program Files\Tumbleweed\Desktop Validator\DVService.exe SUCCESS "Image Base: 0x13fdb0000, Image Size: 0x22000" 30:57.0 vf_agent.exe 4060 Load Image C:\Windows\System32\spoolsv.exe SUCCESS "Image Base: 0xff770000, Image Size: 0x8c000" 30:57.0 vf_agent.exe 4060 Load Image C:\Windows\System32\spoolsv.exe SUCCESS "Image Base: 0xff770000, Image Size: 0x8c000" 30:57.0 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Windows\System32\spoolsv.exe BUFFER OVERFLOW Type: QueryLinks 30:57.0 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Windows\System32\spoolsv.exe SUCCESS Type: QueryLinks 30:57.2 vf_agent.exe 4060 Load Image C:\Windows\System32\spoolsv.exe SUCCESS "Image Base: 0xff770000, Image Size: 0x8c000" 30:57.2 vf_agent.exe 4060 Load Image C:\Windows\System32\spoolsv.exe SUCCESS "Image Base: 0xff770000, Image Size: 0x8c000" 30:57.2 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Windows\System32\spoolsv.exe BUFFER OVERFLOW Type: QueryLinks 30:57.2 vf_agent.exe 4060 IRP_MN_QUERY_INFORMATION C:\Windows\System32\spoolsv.exe SUCCESS Type: QueryLinks 30:57.6 java.exe 2036 Thread Exit SUCCESS "Thread ID: 5736, User Time: 0.0000000, Kernel Time: 0.0000000" 30:57.9 BsSndRpt.exe 9860 Load Image C:\Windows\SysWOW64\psapi.dll SUCCESS "Image Base: 0x751a0000, Image Size: 0x5000" 30:57.9 BsSndRpt.exe 9860 Thread Exit SUCCESS "Thread ID: 1636, User Time: 0.0000000, Kernel Time: 0.0000000" 30:57.9 BsSndRpt.exe 9860 Thread Exit SUCCESS "Thread ID: 9336, User Time: 0.0156001, Kernel Time: 0.2028013" 30:57.9 HPLaserJetService.exe 2720 Thread Create SUCCESS Thread ID: 9260 30:57.9 taskhost.exe 6784 Thread Create SUCCESS Thread ID: 8748 30:57.9 BsSndRpt.exe 9860 Process Exit SUCCESS "Exit Status: 1, User Time: 0.0156001 seconds, Kernel Time: 0.2184014 seconds, Private Bytes: 5,509,120, Peak Private Bytes: 5,599,232, Working Set: 10,518,528, Peak Working Set: 11,059,200"