Found reference to API "Stop trace session FAILED NAME <%s> GUID <%s>, GetLastError <%ul>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Start trace session FAILED NAME <%ls> GUID <%ls>, GetLastError <%ul>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Stop trace session FAILED NAME <%ls> GUID <%ls>, GetLastError <%ul>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Enable trace provider FAILED GUID <%s>, GetLastError <%ul>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Process Trace FAILED, Session Name == <%ls> GetLastError == <%lu> REALTIME" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - ETW Consumer Helper open trace session FAILED, Name <%s> GetLastError <%lu>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Disabe trace provider FAILED GUID <%s>, GetLastError <%ul>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Process Trace FAILED, Session Name == <%ls> GetLastError == <%lu> NOT REALTIME" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Error - Create WinEvent Failed, %ls GetLastError == % lu" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "Flush trace session FAILED NAME <%s> GUID <%s>, GetLastError <%ul>" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "GetLastError" (Indicator: "GetLastError"; Source: "sample.bin"), Found reference to API "SetLastError" (Indicator: "SetLastError"; Source: "sample.bin"), Found reference to API "ERROR - Wait for service power state event FAILED, GetLastError==%lu" (Indicator: "GetLastError"; Source: "sample.bin")