Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-12 15:54:43 | 2025-06-12 16:25:39 | 1856 seconds | Show Options | Show Analysis Log |
nohuman=yes
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:14,990 [root] INFO: Date set to: 20250611T17:29:59, timeout set to: 1800 2025-06-11 18:29:59,191 [root] DEBUG: Starting analyzer from: C:\tmpjeo7jmad 2025-06-11 18:29:59,191 [root] DEBUG: Storing results at: C:\edknEHS 2025-06-11 18:29:59,191 [root] DEBUG: Pipe server name: \\.\PIPE\QWjaLaT 2025-06-11 18:29:59,191 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-11 18:29:59,191 [root] INFO: analysis running as an admin 2025-06-11 18:29:59,191 [root] INFO: analysis package specified: "exe" 2025-06-11 18:29:59,191 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-11 18:30:00,160 [root] DEBUG: imported analysis package "exe" 2025-06-11 18:30:00,160 [root] DEBUG: initializing analysis package "exe"... 2025-06-11 18:30:00,160 [lib.common.common] INFO: wrapping 2025-06-11 18:30:00,160 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-11 18:30:00,160 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\AppVShNotify.exe 2025-06-11 18:30:00,160 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-11 18:30:00,160 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-11 18:30:00,160 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-11 18:30:00,160 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-11 18:30:00,394 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-11 18:30:00,504 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-11 18:30:00,535 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-11 18:30:00,551 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-11 18:30:00,551 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-11 18:30:00,566 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-11 18:30:00,566 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-11 18:30:00,566 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-11 18:30:00,566 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-11 18:30:00,566 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-11 18:30:00,566 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-11 18:30:00,566 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-11 18:30:00,566 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-11 18:30:00,566 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-11 18:30:00,566 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-11 18:30:00,566 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-11 18:30:00,566 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-11 18:30:00,566 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-11 18:30:11,801 [modules.auxiliary.digisig] DEBUG: File has a valid signature 2025-06-11 18:30:11,801 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-11 18:30:11,801 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-11 18:30:11,801 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-11 18:30:11,801 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-11 18:30:11,801 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-11 18:30:11,801 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-11 18:30:11,801 [modules.auxiliary.disguise] INFO: Disguising GUID to c59a3e67-dd86-490e-8d0c-57bd409269e1 2025-06-11 18:30:11,801 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-11 18:30:11,801 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-11 18:30:11,801 [root] DEBUG: attempting to configure 'Human' from data 2025-06-11 18:30:11,801 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-11 18:30:11,801 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-11 18:30:11,801 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-11 18:30:11,801 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-11 18:30:11,816 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-11 18:30:11,816 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-11 18:30:11,816 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-11 18:30:11,816 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-11 18:30:11,816 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-11 18:30:11,816 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-11 18:30:11,816 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-11 18:30:11,816 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-11 18:30:11,816 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-11 18:30:11,816 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-11 18:30:11,832 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmpjeo7jmad\dll\696.ini 2025-06-11 18:30:11,832 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-11 18:30:11,832 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-11 18:30:11,832 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-11 18:30:11,832 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-11 18:30:11,832 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-11 18:30:11,832 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-11 18:30:11,847 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmpjeo7jmad\dll\PHaQKJO.dll, loader C:\tmpjeo7jmad\bin\twifUZhO.exe 2025-06-11 18:30:11,926 [root] DEBUG: Loader: IAT patching disabled. 2025-06-11 18:30:11,926 [root] DEBUG: Loader: Injecting process 696 with C:\tmpjeo7jmad\dll\PHaQKJO.dll. 2025-06-11 18:30:11,972 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-11 18:30:11,972 [root] INFO: Disabling sleep skipping. 2025-06-11 18:30:11,972 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-11 18:30:11,972 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-11 18:30:11,972 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-11 18:30:11,972 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-11 18:30:11,972 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-11 18:30:11,988 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-11 18:30:12,004 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-11 18:30:12,004 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-11 18:30:12,004 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF8234D0000, thread 1896, image base 0x00007FF60D500000, stack from 0x0000008EFACF4000-0x0000008EFAD00000 2025-06-11 18:30:12,004 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-11 18:30:12,035 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-11 18:30:12,035 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-11 18:30:12,035 [root] DEBUG: Successfully injected DLL C:\tmpjeo7jmad\dll\PHaQKJO.dll. 2025-06-11 18:30:12,035 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-11 18:30:12, <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-12 15:54:43 | 2025-06-12 16:25:19 | none |
File Details
| File Name |
AppVShNotify.exe
|
|---|---|
| File Type | PE32+ executable (GUI) x86-64, for MS Windows |
| File Size | 231440 bytes |
| MD5 | 3e705409974662fd944b65c3b9adac31 |
| SHA1 | b702cf10d14455c899de34001eae342c1ba5b6cf |
| SHA256 | 071da06da3d61e49c4a0edca37097b39b7c96a1aa820453f8cc6c8aa55cfd98e [VT] [MWDB] [Bazaar] |
| SHA3-384 | 04ab6bd331034e738c40ba8060faa167e12714793546923041327d969eaea94633c4cad707ee7ede5d05c6bb13c72218 |
| CRC32 | A52F6643 |
| TLSH | T1DE34E57BDE28F8D1D27E5CB8A751C7009B726470475253CBC278C26ACE036E46EBAD25 |
| Ssdeep | 3072:RyMlaAj0JtLslVgqTyhq0+UJI0yWGNU6ITLz0cnVwEKTYGUh:Ry22JtQnTyhq0X1yWGNU6ITLzBxKTYn |
| PE | File Strings BinGraph Vba2Graph VirusTotal |
manifesterrors.h
dccmgripc_c.c
transportapiwrapper.cpp
.?AU_Crt_new_delete@std@@
createsubsystemtokenizercollectiontests.cpp
notification_listener.h
fileextension.cpp
vfs_policy_mock.h
cancelresponsetest.h
@.data
vservices_ipc.h
notificationmanagertests.cpp
packageuserpolicydocumenttests.cpp
rsod_runtime.cpp
registry_staging_hive_staging.cpp
systemserver.cpp
mimetype.cpp
SetThreadpoolThreadMaximum
??1_Locinfo@std@@QEAA@XZ
mockpackagegroupdescriptorfactory.cpp
vfs_config_manager.cpp
serverpage.cpp
servicefactory.h
mockmanifest.cpp
AppV::Subsystem::ShellExtensions::RpcServer::start_rpc_server
GetStartupInfoW
policyidmgrtests.cpp
mockpublishingoperation.h
shellextensiondetector.h
packagegroupimpl.h
_initterm_e
package.cpp
cachedregistry.cpp
rsod_runtime.h
clientnotifyimpl.cpp
sppublish.h
encoder.cpp
filesystemmetadatafactory.cpp
.?AVios_base@std@@
frontend.cpp
virtualprocessactivities.h
mapi_ipc.cpp
sysroot_mapper_test.cpp
endpoint_mapper.cpp
vfs.cpp
fileutilstests.cpp
hive_manager.cpp
sample_visualizer.h
testmanager.cpp
vobjbuilder.h
PA_A^A]_^
sequencersqm.cpp
unittestmodule.cpp
createprocessipc_c.c
vfs_section_visitor.h
aclutils.h
rpc_shell_notify_task.hpp
packagegroupdescriptordocumentfactory.h
vfs_path_helper.cpp
office_streaming_manager.cpp
virtualeventing.cpp
mockcompackagerreader.h
_o__purecall
savpkg.cpp
doserviceprovider.cpp
clientexceptionfactorytest.cpp
uphpublishoperations.cpp
mtypecmd.cpp
policydocument.cpp
packageregistry.h
socket.cpp
treeenumeratortests.cpp
vcom_deployment.h
.?AV?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
reflectedcomplexnode.h
fsmetadataiterator.hpp
filesystemlogger.cpp
test_filepublishserver.cpp
shortcut_notifier_ipc_c.c
GetSecurityDescriptorControl
packagerefreshtests.cpp
swrpcclient.cpp
parsing_tests.cpp
encoderview.cpp
fD9$Bu
publishingactivitytests.cpp
istream.h
idetector.h
registry_writer.h
crypt.h
integrationmanagertests.cpp
list<T> too long
TlP0X
packageregistryutilities.cpp
virtualapplicationpackager.h
sftworkitemdecorators.cpp
H9|$0t
clientevents.h
fileexclusiondetectorut.cpp
mockapplicationinformationwrapper.h
shortcut_handler.cpp
mappcmd.h
_o__resetstkoflw
virtualservicerequestmanageripc.h
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
integration_rpc_task.hpp
wmi_mof_generator.cpp
ut_cpfiles.cpp
0A_A^A]A\_^[
orchestrationrc.h
sqmuploadmanager.h
wmi_utils.h
vfs_query_attr_test.cpp
clientpackageutilities.cpp
cxapp.cpp
VWAVH
?id@?$numpunct@_W@std@@2V0locale@2@A
msilogconfig.cpp
publishing_manager.cpp
mockhttpresource.h
reflectionmanager.cpp
encoderopts.h
virtualdrivers.cpp
manifestdocumentscripttests.cpp
idataretriever.h
O0M0K
fsod_runtime.cpp
entstreampolicyadaptertest.cpp
sftworkitems.h
segmenttranslator.h
Microsoft Corporation
shortcut_registrator.h
resourcefactory.h
mockswfileutil.h
sessionmanagertests.cpp
memcmp
shortcutmgr.h
sxssequencerlog.h
packagefactory.cpp
background_load_manager.cpp
packagemachinepolicydocumentfactory.h
runtimecfgregeditdialog.cpp
machinepackagegrouptests.cpp
wmi_monitor.cpp
getfiledatatest.cpp
configurepackagetests.cpp
sputils.cpp
virtualcom.h
jitv_deployment.cpp
catalogmanager.h
userinfo.cpp
sec9writer.cpp
icon.cpp
disconnectpolling.cpp
folder_redirection_task.cpp
activation_marshaller_client.cpp
documentstore.h
manifestutils.h
manifestfile.h
swlistener.h
reviewerrorspage.cpp
publish_operation_tests.cpp
transforms.cpp
subsystem_module_collection.h
scriptingerrors.h
D$0,f
registry_api_key_iterator.cpp
fileextension.h
Started FTA RPC Server. endpoint : %1%, protocol seq: %2%.
notepad.cpp
clienthosting.h
urivalidator.h
filetypespage.h
sxsxmldoc.cpp
iis_msdeploy.cpp
parsing.hpp
LOGLEVEL
_initterm
mockintegrationmanagerfactory.cpp
create_process.cpp
filesystemmetadatamock.h
.idata$5
shortcut_save_ownership_store_command.hpp
serverregrecord.cpp
lifetimetests.cpp
sequencerlog.h
vobjects_runtime.cpp
packageimpl.h
file_util_tests.cpp
mcommand.h
mockscriptmanager.hpp
mockpathresolver.h
mockpackageuserpolicydocument.h
mockscriptlauncher.hpp
test_fileserverpackage.cpp
scheduledtaskmanager.h
.?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@
multirangehttprequestprocessor.cpp
subscriber.cpp
listener.cpp
.pdata
apppropertydlg.cpp
mock.h
zip64.cpp
Microsoft
vreg_passthrough.cpp
D9y s:L
vfs_configuration_loader_helper.h
testmanager.h
command_test.cpp
datadirectories.h
detokenizerinstance.hpp
servicesregistrykeyenumerator.stub.cpp
sec9manager.cpp
rehydrator.h
msilogconfig.h
manifest_reader_test.cpp
clientapi.h
xmlutilsmock.cpp
sgipcservercontrol.cpp
.?AVCAtlException@ATL@@
settingchangedtests.cpp
filepublishserver.h
tcpsock.h
mockvirtualenvironmentutils.h
clientpackageutilities.h
jitv_deployment.h
.data$r$brc
vreg_runtime_configurator_test_mocks.h
iis_msdeploy_iis7_provider.h
ve_rpc_client.h
sessiontests.cpp
packagegroupmock.cpp
isv_appvlp_process_notifier.cpp
removepackagegrouptests.cpp
mimeutil.cpp
subsystem_controller_errors.h
processterminatormock.h
GetMessageW
_o__initialize_wide_environment
LocalFree
impersonatormock.cpp
&3Kr-j
vobjects_process_runtime.cpp
Failed to Start FTA RPC Server. endpoint : %1%, protocol seq: %2%, rc: %3%.
subsystem_tokenizer_collection.cpp
comregistrator.cpp
virtualservicesreadertests.cpp
clientcommonrc.h
mockbackupstore.cpp
SetEvent
scriptmanagertest.cpp
registry_staging_package_info_test.cpp
installwizard.cpp
wmi_monitor.h
componentloadertests.cpp
integration_manager.cpp
catalog.cpp
controller.cpp
shellextensionsrpcserver.cpp
core_ipc_servers.cpp
_o__configthreadlocale
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
dcomdetector.h
roaming_integration_manager.h
migrateuser.h
uphregistrator.h
vreg_passthrough.h
spadpackagermanifest.cpp
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
jgspackage.h
printerenumerator.cpp
mockbackupstore.h
iis_utils.cpp
cert_utils.cpp
agent_registrator.cpp
datadirectoriestests.h
vobjects_deployment_test.cpp
filesystemmetadatafactorymock.cpp
apppath_registrator.h
publicapi.h
mockuserpackagegroupplus.h
index.cpp
Legal_Policy_Statement
D$0.f
admincontext.cpp
frontendsettings.h
activitybucketinstancetrackerimpl.h
std.h
packagegroupdescriptordocumenttests.cpp
_o___p__commode
testutils.cpp
optiondialog.cpp
icleanupcommandlineparser.h
0A_A^^
sccmuriconfigtest.cpp
scriptingcomponent.h
packagegrouptests.cpp
cachemanager.cpp
vreg_process_runtime.cpp
vfsmapper.h
file_enum_utils.h
sp_rpc_client.cpp
checkmanifest.cpp
subsystem_monitor.h
appidstorage.cpp
spadpackager.h
filesystemmetadatadocmock.h
SHCreateItemFromParsingName
genericshellnotify.h
publishpackagegrouptests.cpp
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
fsinterface.cpp
notificationmanager.h
virtualfilesystem.cpp
vcom_ipc_server.cpp
environment.h
applicationinformationwrapper.h
isvhosttests.h
lookielook.cpp
manifestfile_test.cpp
.tls$ZZZ
errorcode.h
packagexmldiffer.h
CoCreateInstance
nativepackagingsubsystemfactory.cpp
commandstest.cpp
shortcut_packager_subsystem.cpp
apppath_packager.cpp
applicationlistenumerator.h
cmd.cpp
metadatatreeenumerator.cpp
registry_api_marshaller.h
userpolicy.h
invalidmanifestdetectorut.cpp
secchannel.cpp
subsystems_vnext.h
manifest_reader.cpp
request.h
primarydetectors.cpp
connectedproc.cpp
Microsoft Time-Stamp PCA 20100
applicationfiledlg.h
documentstore.cpp
softwareclientregistrator.cpp
RpcServerUnregisterIf
api-ms-win-crt-string-l1-1-0.dll
extensionpointgenericxmlreader.h
transformapp.cpp
httprequestimp.cpp
mocks.cpp
reportingactivities.h
vfs_config_manager_test.cpp
.rdata$r
fsod_runtime.h
sample_runtime.cpp
`A^_^
iis_visualizer.h
vfs_runtime.cpp
sample_registrator.cpp
mockcompackager.h
mockstoreutils.h
vfs_download_splitter.cpp
mockcontrollerplus.h
unittestbase.h
serverlistview.cpp
.CRT$XIA
vs_registrator.h
180823202627Z
getresponsepayloadtests.cpp
userpolicy.cpp
clientcommonmocks.h
publishingmanagertests.cpp
sgvregistry.h
111019184142Z
mockclientcomponent.h
wmi_process_runtime.cpp
applicationbuildertests.cpp
propertystoreimpl.h
mockpackagestore.hpp
browserpluginregistrator.cpp
DispatchMessageW
disconnecttest.cpp
isv_policy_adapter.h
basesimplemanifestitem.cpp
serviceinclusionmgr.h
ResetEvent
D8t$0u
rsod_process_runtime.h
directorydaclmanagertest.cpp
.?AV?$_Ref_count@VShellExtensionShellNotifyTask@ShellExtensions@Subsystem@AppV@@@std@@
test_xml.cpp
devirtualizer_interface.h
processlauncher.cpp
GetSidSubAuthority
_o__invalid_parameter_noinfo_noreturn
mockexception.cpp
fsinterface.h
FileDescription
isv_client_session.h
%Microsoft Windows Production PCA 2011
osgsection.h
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
swicon.h
timeupload.cpp
vfslist.cpp
vs_visualizer.cpp
sessionqueuemock.h
manifestdocumentnoxmlmocktests.cpp
mockintegrationmanager.h
rpc_shell_notify_task.h
fta_notifier_ipc.h
reportlogmessagetest.cpp
S-1-5-18
registry_api_value_iterator.cpp
subsystem_virtualization_errors.h
streammapdocumentfactory.cpp
Microsoft Corporation1
UWATAVAWH
registry_staging_config.h
virtualenvironmentmanagertest.cpp
streaminguxprocessapi.h
packagegrouprefreshhelper.cpp
clientapi.stub.cpp
swrpcasyncclient.h
mockpackageuserpolicydocument.cpp
shortpathtable.h
ED$`H
hive_manager_test.cpp
mock_controller.h
Microsoft Operations Puerto Rico1&0$
sgvregistrytest.cpp
exportstests.cpp
treemodel.cpp
detectorresultwriter.stub.cpp
filepublishserver.cpp
mockclientsessionplus.h
packageavailabilitymap.h
filetypedlg.cpp
httpdnld.cpp
10.0.17763.1
namemappers_mock.cpp
enterprise_process_notifier.cpp
vservices_ipc_c.c
cleanupcoordinatorimpl.cpp
iis_msdeploy_provider.h
publishingactivities.cpp
WakeAllConditionVariable
sessionmanager.cpp
mockapi.h
InitializeCriticalSection
mkdiffpkg.cpp
userpackagetests.cpp
Microsoft Time-Stamp PCA 2010
basicenumeratordetectorut.cpp
unsupporteddriverdetector.h
filelookup.h
comexceptions.h
security.hpp
mauthorizecmd.h
settingsender.h
systemcmd_tests.cpp
devicedriver.h
sxsprivateassembly.h
imanifest_reader.h
swthread.h
backgroundloadmanagertest.cpp
sequencetask.cpp
irtpsock.cpp
httprequest.h
iscriptmanager.h
pooledthread.h
vobjects_runtime.h
registryserver.cpp
D$(E3
reporter.hpp
rum_tests.cpp
refreshalltask.cpp
threadpool.h
admin\appman\appv\subsystems\shortcuts\io_operations.cpp
fA9,Qu
SetSecurityDescriptorGroup
sp_rpc_client.h
sftmime_parse.cpp
filesystemmetadatatest.cpp
ConvertSidToStringSidW
integration_manager.h
osdfile.cpp
detectorrunner.h
servertaskrecordtests.cpp
vreg_deployment_test.cpp
mockactivitydatacachemanagerplus.h
projectfileinfo.hpp
iis_ve_wrapper.cpp
t@I;>u,H
errormessagehelper.cpp
mockdocumentstoreenumerator.cpp
hive_manager_impl.h
vreg_cow_utils.cpp
.?AV?$_Ref_count@Vfta_rpc_server@@@std@@
statemanager.h
servertaskrecord.h
client_request_proxy.cpp
dcutils.cpp
opcheck.cpp
application.h
.rdata$zETW9
virtualenv.cpp
subsystem_settings_validator.hpp
mockhttpresource.cpp
mock_xml_fta_schema.h
mock_notification_listener.hpp
publicapitests.cpp
UVWAVAWH
L$0E3
activitycoordinatormock.cpp
exclusionmanager.hpp
mock_shell_refresh_subsystem_registrator.hpp
impersonatortests.cpp
subsystem_controller.h
usercreds.h
clientsessions.h
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
related_name_resolver_test.cpp
A_A^A\_]
publishingcommands.h
runtime_manager.cpp
readtests.cpp
optionstask.cpp
office_streaming_manager.h
nofs.cpp
runtimecfgxmleditdialog.cpp
runtimecfgeditscriptpage.cpp
callback.h
100701213655Z
16bitappdetectorut.cpp
filesystemmetadatatests.cpp
storebasedcleanuptests.cpp
datadirectoriestests.cpp
mockvirtualenvironmentutilsplus.cpp
activitymgroverrides.h
filetypelistview.h
registryvalue.h
appvclientconfigurationimpl.cpp
schemautils.cpp
TerminateProcess
dllmain.cpp
query_service_config.hpp
reflectedbasenode.h
InitializeConditionVariable
virtual_environment_map.hpp
pendingtaskmanagerent.h
vobjects_utils.hpp
fixpackagestore.cpp
reportmgr.cpp
servicehooks.cpp
mockvirtualservicesreader.cpp
_o__seh_filter_exe
Shell notifier failed to start because it could not create a task scheduler.
mocksubsystemregistrator.h
log_helpers.hpp
appvclient.cpp
mockregistryaccess.h
jitv_runtime.cpp
packageuserpolicydocumentfactory.cpp
dehydrator.h
?_Xout_of_range@std@@YAXPEBD@Z
datareader.hpp
sftmime_utdefs.h
t8H;1u$L
jgsutil.cpp
virtualservicerequestmgr_c.c
Microsoft Windows0
testutils.h
compackagervaluestringbackedbyregistrytests.cpp
vcom_process_runtime.h
packagetest.cpp
pendingtaskmanagerisv.cpp
checkhybridconnectionrulestests.cpp
dighashtable.cpp
vobjects_runtime_test.cpp
wow64_redirect.hpp
mobjectcmd.cpp
errorcode.cpp
unpublishpackagegrouptests.cpp
validatesftuser.cpp
.CRT$XPZ
httpdnld.h
httpsessionmgr.h
mockvirtualenvironmentutilsplus.h
sessionoverrides.h
usermanagerimpl.h
sftmime_exec.cpp
activityclienttests.cpp
persistentdatatest.cpp
NdrServerCall2
mock_io_operations.h
.text$x
wWinMain
R!s4Z
fta_packager_subsystem.cpp
fileresource.h
packagemgr.h
clntdefs.h
processcreationhelper_test.cpp
.?AV?$_Ref_count@Vregistered_interfaces@SwRpcServer@@@std@@
mockpackagegroupdescriptordocumentimpl.cpp
registry_section_parser.cpp
httpdcserver.h
subsystem_command.h
settingcache.h
sftsecurity.h
.xdata$x
shortcutserver.cpp
exclusionlist.cpp
test_mocks.h
shortcut_manifest_interface.h
RpcServerListen
GetModuleHandleW
usercontext.h
unpublishpackageactivitytests.cpp
mockscheduledtaskmanager.h
wmi_metadata_test.cpp
control_dispatcher.h
createprocessclient.h
virtual_process.cpp
removepackagetest.h
notifier_process.hpp
isettingsender.h
iis_registrator.cpp
iconfigapplicator.h
finddependencies.h
usermanagertests.h
virtualapplicationpackagerwriter.cpp
clientcomponentmock.h
vfs_deployment.h
publishingrefreshtests.cpp
appidmgr.h
.CRT$XLZ
ftmanager.cpp
virtual_service_control_manager.cpp
hive_manager_mocks.cpp
sectioncodecimpl.cpp
_o__register_onexit_function
pacmancfg_tests.cpp
.giats
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
VAVAWH
background_load_queue.h
xmlutilstest.cpp
shortcutresolver.cpp
usermanagermock.cpp
vfs_deployment.cpp
T$0H;
serviceinterfaces.h
sgservicing.h
merrdisplay.stub.cpp
collectortests.cpp
datadirectoriesmock.h
vshell_policies_loader.cpp
sec9fixup.cpp
shortcut_registrator.cpp
complusdetector.h
vshell_ipc.h
policyutilitiestest.h
ftaobject.cpp
shellextensiondetector.cpp
usermgr.h
wow64_mapper_test.cpp
venv_configurator.cpp
pacmancfg.cpp
command_helper_test.cpp
0A_A^_
manifestfile.cpp
OriginalFilename
osdscript.h
mock_client_component.hpp
machinepackagetests.cpp
sample_ve_wrapper.h
packagexmldiffer.cpp
activitydatacachetests.cpp
settingactivities.cpp
connection.cpp
virtualization_errors.h
clientstubintf.h
metadataenumeratorfactory.h
rtpudpsock.cpp
raii.cpp
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
userdcc.cpp
activexpackager.cpp
osgfile.cpp
publishingservertest.cpp
vfs_policy_mock.cpp
storebasedcleanup.h
vfonts_process_monitor.cpp
getnetworkstatisticstest.h
sessionqueueimpl.h
publishingserver.cpp
process_terminator_tests.cpp
sessionimpl.cpp
command_line_cleaner_test.cpp
cachedregistry.h
$Microsoft Ireland Operations Limited1
PROCESSOR_ARCHITEW6432
blocklist.cpp
makediffsft.h
userpackagegrouptests.cpp
fD94Au
datarequest.h
reportinguploader.h
vregreflectiontest.cpp
xmlutilsmock.h
subsystem_manager.h
vs_error.h
spadregistrator.cpp
vs_runtime.h
mockisvhost.cpp
filesystemmetadata.h
appvclientconfigurationimpl.h
activitycoordinatormock.h
filesystemmetadataenumeratormock.cpp
mockmanifestdocumentfactory.cpp
primarydetectors.h
validate.h
vobjects_process_monitor.cpp
sxsconflictlog.cpp
shortcut_rpc_server.h
reg_interface.hpp
manifestdocumenttests.h
UVWATAUAVAWH
embeddedscriptparsertests.h
eventmgr.cpp
virtualapplauncher.h
rtspservicemanager.cpp
CloseHandle
notificationlistenertest.cpp
@A__^
.?AVexception@std@@
@.reloc
fsmetadataentry_ut.cpp
bad array new length
usermanagerimpl.cpp
xmlsearchtestsink.h
baseparser.cpp
.?AUactivity@Scheduler@@
httpsession.cpp
packageavailabilitymap.cpp
folder_redirection_task.h
vshell_map_utils.cpp
pacmancfg.h
mockpackagemachinepolicydocument.h
mockcomponentloader.h
??1_Lockit@std@@QEAA@XZ
z.9Wv
policymanager.cpp
enumeration.hpp
vfontsbuilder.cpp
compackager.cpp
istreaminguxprocess.h
wmi_subsystem_utils.mock.cpp
reportingactivitytests.cpp
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
GetSystemTimeAsFileTime
clientstubapi.cpp
rtsp.cpp
regreflectioninfo.cpp
RpcBindingInqAuthClientW
.?AVRpcServer@ShellExtensions@Subsystem@AppV@@
detectorresultwriter.h
mocksubscriber.h
subscriber.h
fileinfo.cpp
registry_api_template.h
win32dllloader_tests.cpp
minidumpwriter.h
servicesregistrykeyenumerator.cpp
manifestdocprovider.cpp
securitydescriptormetadata.cpp
packageregistrymock.h
newappdlg.cpp
utfsinterface.h
compackagertests.cpp
ipackagepathmanager.h
pptauth.cpp
xml_writer.cpp
iniparser_mock.hpp
handle_manager.cpp
statemanager.cpp
SetUnhandledExceptionFilter
compluscatalogenumerator.h
packagegroupschemacompatibilitytests.cpp
vservices_runtime_tests.cpp
sgcomsuite.cpp
mockcachemanager.cpp
settingactivities.h
fta_registrator_test.cpp
packagefactorymock.cpp
vcom_runtime.cpp
exception.h
com_ut_configuration.cpp
virtualenvironmentmaptest.cpp
httpinternalrc.h
.?AVtype_info@@
parser_utils.h
configentry.h
servertaskrecord.cpp
manifestdocumentmock.cpp
iis_prereqs.h
browserpluginpackager.cpp
D$ E3
.text
com_configuration.cpp
subsystem_module_collection.cpp
pendingtasks.cpp
.?AV_Ref_count_base@std@@
shellextensionspackager.h
packagemachinepolicydocument.cpp
creatingtransformpage.h
packagefactorymock.h
vregbuilder.cpp
.?AVfta_shell_notify_task@fta@AppV@@
manifestutilstests.cpp
subsystem_composite_detokenizer.h
.rdata$brc
.?AV?$basic_iostream@_WU?$char_traits@_W@std@@@std@@
policyapitests.cpp
package_config_impl.cpp
integration_backup_store.cpp
merrdisplay.cpp
fileserverpackageversion.cpp
oldcatalogmanager.h
swappmgr.h
admincontext.h
apppath_packager.h
mockmanifestdocumentplus.h
seqsample_packager.h
.?AV?$numpunct@_W@std@@
swthread.cpp
utsftprocessor.cpp
dcserver.cpp
fsmetadataentry.hpp
dctypecreator.h
virtualenvrpcserver.cpp
vcom_runtime.h
sock.cpp
vcruntimedetectorut.cpp
getnetworkstatisticstest.cpp
cert_utils.h
activitymaptests.cpp
test_fileserverpackageversion.cpp
dccserver.h
vobjects_deployment.cpp
sp_visualizer.h
fileutilsserver.cpp
admin\appman\appv\shared\include\coinitialize.h
.idata$4
vregsearch.cpp
complusdetectorut.cpp
arpinfo.hpp
vservices_runtime.h
componentloaderoverridecontroller.h
printerdriverdetector.h
MESSAGE
rtpudpsock.h
mockpackagegroupdescriptor.hpp
.?AV?$_Ref_count@Vfta_shell_notify_task@fta@AppV@@@std@@
.rdata$T$brc
GetTokenInformation
vfs_section_reader.h
activation_marshaller.cpp
servicesregistrykeyenumerator.h
componentloaderoverridecontroller.cpp
clientconfiguration.cpp
pendingtasks.h
osgparser.h
mockperformancecounterreader.h
historytask.cpp
_o__cexit
dataretriever.h
helperio.cpp
regtests.cpp
mutex.cpp
errorgen.h
sputils.h
spadpackagervirtualregistryreader.cpp
vshell_process_runtime.h
reg_ownership_guard_tests.cpp
manifest_reader.h
InitializeSecurityDescriptor
packagedata.cpp
progressinstallpage.cpp
transformserrors.h
taskscanner.cpp
appx_shortcut_manifest.cpp
vfs_decoder.cpp
mockpackageconfigmanagerplus.cpp
namemappers_test.cpp
catalogmock.cpp
shellnfy.h
activitycoordinatorimpl.cpp
optimizecp.cpp
inlinefuncs.h
shellextensionsrpcserver.h
osgfile.h
isv_streaming_manager.cpp
wmi_namespace.h
virtualservices.h
sxspe.cpp
sequencersetupca.cpp
wmi_class_entry.cpp
registry_section_parser.stub.cpp
mockactivitymanager.cpp
vfonts_monitor.h
__C_specific_handler
mockmanifestdocumentfactory.h
applicationfiledlg.cpp
mockclientconfiguration.h
com_catalog_complus.cpp
dcomdetector.cpp
clientmanagertests.cpp
softgriddcserver.h
iis_wmi_provider.h
manifestdocumentmock.h
dcrefresh.h
mock_notification_listener_imp.hpp
stubheader.h
ftaobject.h
fileresource.cpp
dcassoccreator.h
clientnotify.h
tests.cpp
virtualserviceipc.h
mockpackagegroupdescriptordocument.h
packagegroupfactory.h
CreateEventW
packagertests.cpp
configoptions.cpp
filetypeaction.cpp
vobjects_deployment.h
bad allocation
sessionmgr.h
isv_streaming_manager.h
com_error.cpp
mockshortcutmanifestinterface.h
virtualservicerequestmanageripc_s.c
servicefactory.cpp
test_utils.cpp
shortcut.cpp
checkprerequisites.cpp
swrpcserver.h
.text$mn$00
t$ WH
@8x$t
requiredapplicationspage.cpp
hive_manager_mocks.h
virtualizationmanagertest.hpp
savsetupconfig.h
Microsoft Time-Stamp Service0
H;P s
sgremoteapiexceptions.h
jgsutil.h
subsystemconfigitem.cpp
clientcomconsumer.h
manifestbasedcleanuptests.cpp
vfs_path_helper.h
.rsrc$01
DebugBreak
printerenumeratorut.cpp
threadsyncdata.cpp
errorcode_tests.cpp
blockmap.h
payloadorganizer.hpp
D$pE3
subsystemconfigitem.h
apptask.h
virtual_environment.h
fta_packager.h
sp_ve_wrapper.h
loggingsession.h
shortcut_ownership_man_tests.cpp
mockbase64encoding.h
taskscannerut.cpp
{R6me
isvparameters.h
test_path_map.cpp
mockusercatalogplus.h
$9C s$L
settingsendertest.cpp
ntelD
packagegroupimpl.cpp
syncobject.h
cleanupcommandlineparserimpl.h
ntfstofsmetadataconverter.hpp
swrc_exception.h
dumb_client_mocks.h
scriptingcomponenttest.cpp
aclutilsmock.cpp
InitializeAcl
sessioncontroller.h
streaminguxmanager.h
USERENV.dll
virtualizationmanagerenttest.cpp
streammapdocumentimpl.h
GetSecurityDescriptorDacl
_o__invalid_parameter_noinfo
runtimecfgsearch.cpp
process_monitor.cpp
activity_data_cache_impl.cpp
com_std.h
fta_registrator.cpp
vcom_runtime_policies.hpp
InitializeSListHead
vshell_policies_loader.h
sessioncontroller.cpp
xmlutilstest2.cpp
unittestmodule.h
vs_runtime.cpp
httppublishserver.cpp
session.h
packageinformationwrapper.cpp
path_and_data_parser.h
setupenginetest.cpp
getresponseheadertests.cpp
sp_registrator.cpp
mockapi.cpp
_CxxThrowException
namespacefactory.cpp
H;0u/H
application.cpp
sftworkitemdecorators.h
scriptlauncher.h
subsystem_error.h
integration_cleanup_registry_access.cpp
swguidclass.h
manager.cpp
serverconfiguration.cpp
packagedata.h
transactioninterface.h
T$pM+
isv_package_config_impl.h
LeaveCriticalSection
_o__set_fmode
applypatch.cpp
L$ USVWAVH
shortcut_notifier_ipc.h
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
virtualizableextensions.h
packagegroupdescriptordocumentfactory.cpp
packagegrouptemplatetests.cpp
sxspublicassembly.cpp
virtualregistry.cpp
sysguardfile.cpp
Microsoft Corporation1)0'
integration_registry_access.cpp
sp_error.h
Microsoft Corporation. All rights reserved.
rtspproxyconfigtest.h
performancecounterreadertests.cpp
xmldll.cpp
exclusion_data.h
packagegroupdescriptordocumenttests.h
L$PH3
basexmlelement.cpp
mfilesystemcmd.cpp
mockclientapi.cpp
serverregrecordtests.cpp
scm_stopwatch.h
runtimecfgapplicator.h
integration_manager_factory.cpp
runtimecfgmanager.cpp
transportcallback.h
creatingpackagepage.h
admin\appman\appv\shared\ipc\swrpcserver.cpp
.text$yd
trandefs.h
mhelpcmd.h
appvclient.h
activitybucketinstancetrackertests.cpp
vservices_config_reader.cpp
.?AV?$_Ref_count@Vshortcut_rpc_server@@@std@@
servicemanager.h
sequencerlog.cpp
sgvregistry.cpp
devicedriver.hpp
sgipcservercontrol.h
transaction_manager.h
virtualenvmanager.cpp
shortpathtablebuilder.cpp
iis_msdeploy_iis6_provider.h
apppath_registrator.cpp
compackager.h
importfuzzer.cpp
xml_variants_test.cpp
pathresolvertests.cpp
testschannell.cpp
sample_monitor.h
disconnecttest.h
runtimecfgsearch_test.cpp
jitv_server.cpp
vreg_cow_utils.h
mockpolicydocument.cpp
savsetupconfig.cpp
sessionmock.h
seqsample_main.cpp
.?AV?$_Ref_count@VLogImpl@AppV@@@std@@
fta_rpc_server::start_rpc_server
pkgmgr_tests.cpp
manifest.h
catalogfactory.h
mockpackageinformationwrapper.h
namespace_impl_mock.h
?_BADOFF@std@@3_JB
@.rsrc
registry_staging_deployment.cpp
gpobject.cpp
mockpackagemachinepolicyfactory.cpp
loadedcomponenttests.cpp
publishingrc.h
mockclientsession.h
connection.h
\pipe\FTA_
api-ms-win-crt-private-l1-1-0.dll
comserver.cpp
sftworkitems.cpp
encodevrg.cpp
manifest_virtualization_utils.hpp
,Uxn3E5MO/wgyU++B3KxDcjfIjnV5Cyg9+FCkGXafs+M=0Z
background_load_task.cpp
vfs_deployment_test.cpp
reportappstatustest.h
datadirectories.cpp
persistappdata.cpp
regreflectioninfo.h
mock_process_terminator.cpp
softwareclientpackager.h
transporttestinterface.h
treemodel.h
background_load_queue.cpp
LegalCopyright
rsod_process_runtime.cpp
sftapi.h
httppublishservertests.cpp
vreg_deployment.cpp
pathhelper.cpp
osgfileio.h
packagegroupfactory.cpp
utsftprocessor.h
AppV::Subsystems::Shortcuts::delete_pinned_shortcut_if_exists
wmi_utils.cpp
shellextensionenumerator.h
streamingactivities.h
namemappers_mocks.h
reportingcomponent.cpp
vfonts_runtime.cpp
vfs_runtime_test.cpp
publishmanager.h
191123202627Z0
activitypublishclient.h
installutils.h
memory_vfs_decoder.h
M0K0I
mockcswatcher.h
savsetupactions.h
process_notifier.h
reportinguploader.cpp
reflectedcomplexnode.cpp
zip64_test.cpp
H;H A
osguardfile.cpp
mockclientsessionlistplus.h
authtask.cpp
runtimecfgmanager.h
virtual_service_request_proxy.cpp
security.cpp
vfs_download_splitter.h
_o___std_exception_copy
vservices_server.cpp
simplesetupactions.hpp
namespace.h
integrationmanageradapter.cpp
mockcontrollerinternal.h
mockxmlutils.cpp
utcontext.h
rtspworkitems.cpp
cleanupcoordinatorimpl.h
vregbuilder.h
transactionfactory.h
service_config_reader.cpp
nativepackagingsubsystem.h
visualization_provider.h
merrdisplay.h
_o__configure_wide_argv
machinecatalogtests.cpp
filesystemmetadatamock.cpp
HeapDestroy
impersonator.h
comserver.h
.rdata$zzzdbg
settingscollators.h
DEBUG
iscriptlauncher.h
virtualization_manager.h
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
clientdefinitions.cpp
WARNING
WAVAWH
mock.hpp
.rdata
installsetupactions.cpp
service_hooks.cpp
mock_data.hpp
??0_Locinfo@std@@QEAA@PEBD@Z
reg_interface_test.cpp
activation_marshaller.h
virtualserviceagentipc_s.c
application_manager_singleton.h
mockscriptbuilder.cpp
vservices_monitor.cpp
mockclientapi.h
lfs.cpp
resourcemanager.cpp
SetThreadpoolThreadMinimum
cachedregistrytests.cpp
locatortests.cpp
printerenumerator.stub.cpp
test.h
sftmedia.cpp
optimizecp.h
mockapplicationinfostore.h
genericcontext.cpp
manifestdocument.h
eventmgr.h
persistappdata.h
vshell_relaunch_hooks.h
swxml.h
publiceventsdetectorut.cpp
vfsmapper.cpp
mockgetserverconfigimpl.h
syncmgr.cpp
LINENO
sgcomipcserver.cpp
%Microsoft Windows Production PCA 20110
errorsetter.hpp
sfhs_process_runtime.h
manifestdocprovidertest.cpp
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
subsystem_server.hpp
applicationpage.cpp
activitymanagertests.cpp
jigsawfile.cpp
configurationpage.cpp
AppVShNotify.exe
oostest.cpp
vs_ve_wrapper.h
ftmanager.h
registratortest.cpp
spadpublishoperations.cpp
launchtask.h
savcfg_crypt.h
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
activitycoordinatortests.h
chunked.h
sessionmgr.cpp
namespace_impl.h
OpenProcessToken
mockreportingqueue.h
createdirectory_tests.cpp
managingauthorityfactorytests.cpp
fsmetadatacreator.hpp
virtualservices.cpp
DebugMessage
activitytests.h
mock_subsystem_finder.h
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
publishpackagetests.cpp
dcservermgr.cpp
_o__set_app_type
vs_monitor.cpp
0A_A^A\
isvhosttests.cpp
_register_thread_local_exe_atexit_callback
endpointmappertests.cpp
applicationmanager.cpp
hClient
sxspublicassemblywalker.cpp
createprocessclient.cpp
vregeditdlg.cpp
vcom_process_monitor.cpp
vcom_monitor.cpp
create_process_server.cpp
process_tests.cpp
getresponseheadertests.h
dllexporttests.cpp
memcpy
.idata$3
mocksettingmanager.cpp
applicationinformationwrappertests.cpp
explodecabpage.h
clientimpl.h
sizeestimatorvisitor.h
mockcomponentlocator.cpp
mockpackageuserdocumentimpl.h
makediffsft.cpp
movefile_tests.cpp
aclutils.cpp
vshell_server.cpp
bulkprogress.cpp
261019185142Z0
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
virtualregistry.h
subsystems.h
listener.h
.?AV?$scope_guard_func_impl@V?$_Binder@U_Unforced@std@@P6AJXZ$$V@std@@@utility@appv@@
stringresources.cpp
subsystem_utils.cpp
dofilefuzzer.cpp
vfs_runtime.h
virtualprocessactivities.cpp
packagetests.cpp
vcomruntimepoliciestests.cpp
user.h
.?AV?$_Ref_count@Vshortcut_shell_notify_task@shortcut@AppV@@@std@@
activitytests.cpp
L$`HcQ
rtspdata.h
servicebundle.cpp
packageregistrytests.cpp
udpsock.h
chunked.cpp
msystemcmd.h
sfttofsmetadataconverter.hpp
shellextensionspackagerbinder.cpp
savagentrpcmock.h
mockpackageuserpolicyfactory.h
processlaunchertests.cpp
connectiongrouptemplatetests.cpp
sgvfontipcserver.cpp
savcfg_crypt_test.cpp
publicapi.cpp
shortcut_packager.cpp
string too long
"Microsoft Window
ssrs_monitor.h
policyfactorymock.cpp
iscriptbuilder.h
unzip64.h
cxapp.h
sqmuploadmanagerut.cpp
policyutilitiestest.cpp
isv_notification_listener_impl.cpp
usermanager.cpp
spadregistrator.h
env_utils.hpp
wmi_subsystem_utils.cpp
vfs_config_manager.h
integration_store_utils.cpp
tlssock.h
processcreationhelper.h
vas_server.hpp
writertests.cpp
activitycoordinator.h
mock_ownership_man.h
uphpackager.cpp
fileassoc.cpp
UATAUAVAWH
servicemanager.cpp
isvparameterstests.cpp
fecserver.cpp
mockclientmanager.cpp
registryvaluetest.cpp
packageconfigtest.cpp
mocknotificationlistenerplus.cpp
filesystemmetadataimpl.cpp
invalid string position
HeapFree
packageuserpolicydocument.h
@A_A^A\_^
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
scriptconfigitem.h
agentlistener.cpp
mocksubsystempackager.h
Thales TSS ESN:7D2E-3782-B0F71%0#
shortcut_manifest_factory.h
vfonts_runtime_test.cpp
mockclientsessionlist.cpp
winhttpresponse.cpp
subsystem_registrator_rpc_server.h
subsystem_vemgr_utils.h
wmi_registrator.cpp
rsod_subsystem_module.h
errormessagehelpertest.cpp
notify_shell_session.hpp
localinstallationpage.cpp
seqproject.h
subsystem_initializer.hpp
L$@H3
sftmedia.h
registry_section_parser.h
nettraffictask.cpp
multirangerequestprocessor.cpp
appid_utils_test.cpp
dcpublisher.cpp
testsubsystem.h
globaluserpackagetests.cpp
jigsawfile.h
coinitialize.h
settingscollators.cpp
vreg_runtime.cpp
feccontext.cpp
activitybucketinstancetrackermock.h
mapi_server.h
registry_writer.cpp
load_configurations_test.cpp
sequencerdialog.h
apptask.cpp
registry_api_key.h
managedpath.h
threadmgr.cpp
short_path_redirector.cpp
uiutils.h
missingfilespage.cpp
transactionschedulertests.cpp
streaminguxprocess.h
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
detectordefs.h
vcom_deployment.cpp
UWAVH
(D$`H
shortcut_ownership_man.cpp
apihelper.cpp
A_A^A\
myseqlog.cpp
transactionscheduler.cpp
GetSecurityDescriptorSacl
EventSetInformation
runtimecfgsearchtask.h
??Bid@locale@std@@QEAA_KXZ
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
.?AV?$_Ref_count@VRpcServer@ShellExtensions@Subsystem@AppV@@@std@@
swfileutil.h
test_classes.hpp
Chttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a
vfs_policy.cpp
integration_backup_store_tests.cpp
_c_exit
logfiltertest.h
iis_ve_wrapper.h
sec9_tree_browser.cpp
manifestdocumenttests.cpp
<unknown log level>
.?AVfailure@ios_base@std@@
swlistener.cpp
vcom_monitor.h
integration_rpc_client.hpp
geturlresponsetest.h
usertokentest.cpp
vshell_ipc_c.c
mapi_client.cpp
shortcut_manifest_factory.cpp
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
streaminguxerrors.h
sp_registrator.h
_o__set_new_mode
vfontshelper.cpp
SHELL32.dll
syncmgr.h
iis_cert.h
sp_monitor.cpp
vobjects_monitor.h
exception.cpp
deimpersonatortests.cpp
streamingmanager.h
installwizard.h
saxfind.cpp
mockpendingtaskmanager.cpp
scriptmanager.cpp
packagemgr.cpp
environment_block_rewriter.cpp
schemautilstests.cpp
subsystemconfigitem_test.cpp
userpolicyapplierimpl.cpp
runtimecfgmultieditdialog.cpp
embedservice.cpp
policyfactory.cpp
.CRT$XTA
workitems.h
.?AVCAccessAce@CDacl@ATL@@
rpcinterface_h.h
mocks.hpp
mockcompackagerwriter.cpp
xmlprocessing.h
idetectorenumerator.h
integration_ownership_store.cpp
datagram.cpp
mockpolicyidmgr.h
locator.h
shortcut_ownership_store.cpp
reportingqueue.h
propertystoretests.cpp
shortcut_rpc_server.cpp
sp_monitor.h
WATAUAVAWH
vfs_namespace_factory.cpp
sgexception.h
packagegrouprefreshhelper.h
service_config_reader_test.cpp
aborter.h
aclutils_tests.cpp
introinstallpage.cpp
mockcontrollerrequests.cpp
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
$`2X`F
fileserverpackage.cpp
packageenumeratortests.cpp
virtualapplauncher_test.cpp
policy_adapter_impl.h
jitv_manager.cpp
softwareclientregistrator.h
registry_api_value.h
ssrs_registrator.cpp
registryconfigitem.h
.?AV?$_Ref_count@Vnotify_data@shortcut@AppV@@@std@@
A_A^A]A\_
rtspresourcemanager.h
virtualserviceagentipc_c.c
.CRT$XCAA
command_helper.hpp
encoderdoc.h
osdfile.h
registry_api_key.stub.cpp
streammapdocumenttest.cpp
sxs_packager.cpp
appfilemgr.cpp
wmi_registrator.h
manifestdocumentscripttests.h
\$ UH
ipublishserver.h
subsystem_rpc_servers.hpp
configurepackagegrouptests.cpp
ADVAPI32.dll
clientmanager.cpp
.CRT$XTZ
usercreds.cpp
apphandle.cpp
terminalhandler.h
iis_error.h
mockpackagegroupdescriptordocumentplus.cpp
.00cfg
resourcemanager.h
mappacc.cpp
setupactions.h
transactionclasses.h
isv_process_notifier.cpp
osdscript.cpp
.?AVCAccessToken@ATL@@
loadtask.cpp
manager.hpp
.?AVSwException@@
nullusercatalog.cpp
uiutils.cpp
envdirector.cpp
package_config_impl.h
vservices_runtime.cpp
transaction.h
mock_package_config_manager.hpp
servicebasics.cpp
mockuserpackagegroupplus.cpp
win32dllloader.h
dcpublisher.h
mauthorizecmd.cpp
http://www.microsoft.com/windows0
configentry.cpp
reportsheet.h
devirtualizer_ut.cpp
UVWATAVH
critsec.h
policymock.h
packagepathmanagertest.cpp
catalogtests.h
ATAVAWH
packagegrouptests.h
isvhost.cpp
mockpendingtaskmanager.h
subsystem_virtualization_error_utils.h
OpenThreadToken
parser_singleton.h
notification_order_manager_impl.cpp
configentry_test.cpp
httpstreamingresource.h
mock_virtual_environment_manager.h
RpcServerRegisterAuthInfoW
.?AVfacet@locale@std@@
CompanyName
I;6u2H
virtualserviceipc_c.c
related_name_resolver.h
configuration.h
GetCurrentThreadId
@A_A^_
utilities.cpp
vshell_relaunch_hooks.cpp
virtual_environment.hpp
packagepathmanager.h
setupparamstest.cpp
mock_service_config_reader.h
initializetests.cpp
unregister_command.hpp
@SVWATAUAVAWH
wmi_snapshot.cpp
iis_wmi_provider_7.cpp
manifestutils.cpp
shortpathtable.cpp
servicerecoverypage.cpp
fsod_process_runtime.cpp
metadatahandler.h
registry_staging_process_runtime.h
documentstoreimpl.cpp
compluscatalogenumerator.stub.cpp
scriptlauncher.cpp
unzip64_test.cpp
sftcoreapi.h
fta_rpc_server.cpp
venv_rewriter.cpp
vreg_runtime_configurator_test.h
_o__exit
AppVShNotify.pdb
GetProcessHeap
wmi_provider_host_hooks.h
applaunchreportdata.h
base64encoding.h
Sleep
namemappers.cpp
20180916002813Z0w0=
udpsock.cpp
mock_ownership_man.cpp
manifestbasedcleanup.cpp
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
dctypecreator.cpp
inisearch.hpp
background_load_manager.h
datapointlogger.h
scheduledtaskmanager.cpp
safe_array_with_structs.hpp
swservice.h
logger.h
clientmodeactivities.cpp
swappmgr.cpp
mockusermanager.h
subscribertests.cpp
u0HcH<H
streamingtest.cpp
@8uwv#I
ftaction.cpp
installsetupactions.h
geturlrequesthandletest.cpp
comresourcemanager.cpp
mockownershipstore.cpp
shellextensionsnotifieripc.h
mockcatalogplus.cpp
Shell notifier failed to start with error code %1%.
frontendsettings.cpp
registry_api_value.stub.cpp
mockcachedregistry.cpp
icodecnta.h
processcreationhelper.cpp
mocknotificationlistenerplus.h
_o__errno
fta_publish_operations.h
filesecurity.hpp
com_ve_wrapper.cpp
impersonation.cpp
D8|$<t
clientcataloginterfacetests.cpp
stubclasses.cpp
)Microsoft Root Certificate Authority 20100
shellextensionspackagerwriter.cpp
clientstubintf.cpp
dsservice.h
thdkeeper.h
transport.cpp
clientpackageutilitiesmock.cpp
caboperationpage.h
uphpackagermanifest.cpp
lock.h
sftheaders.h
wmi_mof_generator.h
usercatalogtests.cpp
zip64.h
iis_metadata_mgr.cpp
~ L;~(r
applicationinfo.h
patchendinstallpage.cpp
publishmanagertests.cpp
fsmetadatacreator_ut.cpp
nodecountervisitor.cpp
GetSidLengthRequired
vcom_process_runtime.cpp
mockpolicydocument.h
jpapp.cpp
mockstreaminguxprocess.h
xmlparser.h
shortcut_packager.h
dacl_tests.cpp
tlssock.cpp
packagemock.cpp
ftaheader.h
shortcutbuildertests.cpp
rpccommon.h
SetSecurityDescriptorDacl
fA94Iu
l$ VWAVH
appvstreamingengine.h
?classic@locale@std@@SAAEBV12@XZ
mockpackagegroupdescriptordocumentimpl.h
shortcutmgr.cpp
detectorresultwriter.cpp
SCOPE
syncobject.cpp
reportsheetwriter.cpp
mock_vreg_token_generator.cpp
tricklequeue.cpp
iis_msdeploy.h
publiceventsdetector.h
basexmlparser.h
mockxmlutils.h
vobjects_process_monitor.h
ncacn_np
xml_interface_test.cpp
virtual_service_agent.cpp
catalogimpl.cpp
filesystemmetadataxmltest.cpp
commands_test.cpp
clientcomponent.h
SetSecurityDescriptorOwner
machinestate.cpp
E;y s/H
catalogfactorymock.h
doconnecttest.cpp
venv_process_runtime.h
queryserverdlg.cpp
packageuserpolicydocument.cpp
createcabpage.h
delete.hpp
packageregistryutilities.h
rpcinterface_c.c
mock_vreg_token_generator_results.cpp
acceleratorlog.hpp
Default
controllertests.h
ProgramFiles(x86)
storebasedcleanup.cpp
userdcc.h
venv_document_handler.h
sample_visualizer.cpp
|hK,_
vfonts_configurator.h
mockmachinepackagegroupplus.cpp
appvirtserverprovider.cpp
mimeserver.h
usermanagermock.h
R$fA;Z*
comclient.cpp
session.cpp
context.h
ftype.h
subsystem_module.h
catalogapitests.cpp
sqm.h
?_Xlength_error@std@@YAXPEBD@Z
package_path_utils_test.cpp
machinestate.h
venv_document_handler.cpp
vservices_monitor.h
api.cpp
shortcut_file.h
device_name_mapper_test.cpp
vemgr_api_test.cpp
mockpackageuserdocumentimpl.cpp
bkgdservice.cpp
requeststate.h
_o__initialize_onexit_table
RpcImpersonateClient
PA^A\_^]
locatoroverridecontroller.cpp
_o_free
virtualservicerequestmgr.h
registryconfigitem.cpp
mhelpcmd.cpp
usermanager.h
xmlprocessingmock.h
virtualapplicationregistrator.cpp
httpresource.h
D$PE3
transformfile.hpp
x'lR&[
sequencersetupactions.h
integration_command.h
mockpackagemachinepolicydocument.cpp
streammapdocument.cpp
httpreportingresource.cpp
datareadertests.cpp
vfs_csidl_root_map_builder.h
fsmetadata.hpp
xmlsearch.h
httpdcserver.cpp
datagram.h
rpc_shell_notify_task.cpp
virtualenvironmenttest.cpp
catalogfactory.cpp
spadpublisher.cpp
registry_staging_hive_staging.h
sftparserxmlut.cpp
memmove
installwzrd2dlg.cpp
publishcomponent.cpp
encoderxmlutils.hpp
shortcut_packaging_unit_tests.cpp
shortcut_ownership_store_tests.cpp
mockutilities.cpp
baselog.cpp
virtualservicemgripc_c.c
mockstatemanager.h
precompiled_header.h
metadata.cpp
shortpathtablebuilder.h
publishing_manager.h
documentstoreenumerator.cpp
propertystoremock.cpp
streaming_manager.cpp
RPCRT4.dll
250701214655Z0|1
mockpublishserver.hpp
vobjects_monitor.cpp
metadata.h
perfmgr.h
stub.cpp
scriptlaunchertest.cpp
.rtc$TAA
virtualeventing.h
e A_A^]
streaminguxmanagertests.cpp
clientservice.h
wmi_visualizer.cpp
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
s_IShortcutNotify_ShellNotifyPath
vfs_process_runtime.h
vfonts_process_runtime.h
componentloader.h
httprequestimp.h
sccmuriconfig.cpp
listenumeratortests.cpp
H9C s!L
catalogtests.cpp
comresourcemanager.h
comregistrator.h
iis_runtime.cpp
sftxml.h
040904B0
filesecurity_ut.cpp
shortcut_ownership_man.h
.CRT$XIC
venv_rewriter.h
extra_fields.cpp
vshelllruntimepoliciestests.cpp
.rdata$zETW2
M H1E
sqm.cpp
sample_process_runtime.cpp
genericcontext.h
namemapper.h
printerenumerator.h
229879+4379540
ftype.cpp
_Mbrtowc
helper.h
venv_runtime.cpp
setupconfig.h
contexthandle.cpp
isvapi.h
xmlsearch_test.cpp
package_config_manager.h
mockfileserverpackageversion.cpp
appvclientmock.h
sgrpcclient.cpp
file.cpp
scriptconfigitem_test.cpp
process.cpp
.?AV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AVbad_alloc@std@@
A_A^A]A\_^]
jgspackage.cpp
workitems.cpp
shortcut_handler.h
vfonts_process_runtime.cpp
s_IFTANotify_ShellNotify
.rtc$IZZ
test_interface.cpp
??1facet@locale@std@@MEAA@XZ
sqmut.cpp
.?AVshortcut_rpc_server@@
runtimecfgsearchresult.cpp
setupconfigtestwithnoparam.cpp
httpresourceprovider.cpp
TranslateMessage
\pipe\ShellEx_
virtualservicemgripc.h
activitypublishclient.cpp
mockembeddedscriptparser.cpp
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
swrpcclient.h
uphpackager.h
genericfsinterface.cpp
critsec.cpp
getmetadatatest.h
?_Incref@facet@locale@std@@UEAAXXZ
perfmgr.cpp
patchendinstallpage.h
ERROR
runtimecfgutils.cpp
ioctl.cpp
traymenu.cpp
virtualizationmanagerisvtest.cpp
L9Ihv'H
virtualservicesreader.cpp
preppage.cpp
wmi_class_entry.h
metadataenumeratorfactory.cpp
embeddedscriptparser.cpp
transforms_reporter.hpp
mocksubsystemcommand.h
compluscatalogenumerator.cpp
.rtc$IAA
CloseThreadpoolCleanupGroupMembers
coreapi.cpp
GetAclInformation
unzip64.cpp
registry_staging_deployment.h
appverr.h
t$(E3
@SVWH
integration_utils.cpp
VWAUAVAWH
cleanupcommandlineparserimpl.cpp
VarFileInfo
wmi_monitor_test.cpp
D$HD9%
seqproject.cpp
unsupporteddriverdetector.cpp
reportingut.cpp
mock_process_terminator.h
reflectedbasenode.cpp
mock_activity_data_cache.hpp
predictivestream.cpp
mockintegrationmanagerfactory.h
activitymanagertests.h
testsubsystem.cpp
swfile.cpp
publishingserver.h
sftwriter.cpp
fileutils.h
streammapdocumentmock.cpp
TUUUUUU
VWAWH
fileassocbuilder.cpp
httpsessionmgr.cpp
compackagerwriter.cpp
com_registrator.h
taef_verify_swrc.h
wmi_mof_generator_test.cpp
buffered_media_res.h
appvclientconfigurationimpltest.cpp
sessiontests.h
integration_store_utils.h
wmi_process_runtime.h
publishdlg.h
rtspserviceprovider.cpp
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
streaminguxprocesstests.cpp
ve_rpc_client.cpp
isvstreampolicyadaptertest.cpp
vfontshelper.h
encoder_pch.h
dccserver.cpp
spadpackager.cpp
raii.h
mock_procutils.h
request_manager_ipc.cpp
venv_package_reader.hpp
D$@HcP
Shortcut
reflectedsinglenode.cpp
vservices_process_monitor.h
documentstoreenumeratormock.cpp
basesimplemanifestitem.h
sfhs_process_runtime.cpp
apihelper.h
vfs_namespace_test.cpp
mockreportingqueue.cpp
A@H98t2L
tricklequeue.h
devirtualizer_interface.cpp
activexpackagerwriter.cpp
fta_packager.cpp
.?AVCAcl@ATL@@
unsupporteddriverenumerator.h
transforms.h
InitializeCriticalSectionAndSpinCount
vfs_csidl_root_map_builder.cpp
clientexceptionfactory.cpp
runtime_database.cpp
virtappregistratortest.cpp
shortcut_file.cpp
ssrs_visualizer.cpp
CoUninitialize
connecttest.h
dccmgripc_s.c
transportimpl.cpp
clientactivitytests.cpp
sxsassemblyid.cpp
\pipe\ShortcutNotifier_
A_A^A]A\_
manifest.cpp
datarequest.cpp
.rtc$TZZ
10.0.17763.1 (WinBuild.160101.0800)
appxindextest.cpp
knownfolder.cpp
saverrors.h
envdirector.h
globaluserpackagegrouptests.cpp
filesystemmetadatafactorymock.h
swexception.h
DeleteCriticalSection
vshell_process_runtime.cpp
helperinterface.h
reg_config.hpp
manifestbasedcleanup.h
RtlCaptureContext
mockcontrollerplus.cpp
.?AVLogFormatter@AppV@@
deviceio.cpp
activexregistrator.h
myseqlog.h
softwareclientpackagerwriter.cpp
fta_notifier_ipc_c.c
shellextensionsregistrator.cpp
vreg_process_runtime.h
swapp.cpp
overrides.cpp
path_and_data_parser_interface.h
CloseThreadpoolWork
x ATAVAWH
packagegroupdescriptordocument.h
subsystem_controller.cpp
controller.h
dsapp.h
mockscheduledtaskmanager.cpp
.CRT$XLA
publishpackageactivitytests.cpp
optiondialog.h
mockcomponentlocator.h
D$@I;
suite.h
reportingactivities.cpp
vreg_deployment.h
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
registry_staging_runtime.h
dotest.cpp
iis_manager.cpp
registry_api_key.cpp
isvapirc.h
RpcRevertToSelf
Notification processed in notifier process. Operation: '%2%', Wait For Completion: '%3%', Path: '%1%', RPC Result: '%4%'
vfs_configuration_loader_helper.cpp
propertiesreadertests.cpp
service.cpp
disconnectpolling.h
hive_manager.h
venv_runtime_test.cpp
virtualinifile.h
process_terminator.h
interface.cpp
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
peruserdata.h
xml_integration_utils.hpp
installtask.cpp
selecttransformoutputpathpage.cpp
create_process_server.h
getpackageguidtest.cpp
propertystoremock.h
mock_ownership_store.cpp
dcc_c.c
mockclientsessionlistplus.cpp
rtsprequest.h
vfs_policy.h
GetLengthSid
sixteenbitappdetector.h
rsod_subsystem_module.cpp
file_tests.cpp
process_terminator_tests.h
mock.cpp
mockassetintelligencewrapper.h
HeapReAlloc
envbuilderbase.h
vservices_config_reader_tests.cpp
mockcompackagerbinder.h
sftmsxml.h
notifier_manager_test.cpp
package.h
linksgclient.cpp
mimetype.h
managingauthority.h
clientconfigurationrc.h
A_A^_
main.cpp
performancecounterreader.h
Microsoft Corporation1200
usrstate.h
runtimecfgxmleditdialog.h
fta_publish_operations.cpp
sxs_packager.h
browserpluginpackagerwriter.cpp
mockactivitydatacachemanagerplus.cpp
mpackagecmd.h
taskscanner.h
listenumeratortests.h
httpresource.cpp
iis_utils.h
Washington1
httpclientcertselector.cpp
msvcp_win.dll
venv_runtime.h
tokenizerinstance.hpp
A_A^A\
configuration_manager.cpp
peruserdata.cpp
vs_utils.cpp
mockserverrecord.cpp
acceleratorwrapper.hpp
.?AVsubsystem_registrator_rpc_server@@
httpreportingresource.h
sgregistrykey.cpp
sxs_packager_tests.cpp
canceldatarequesttest.cpp
envtracker.h
securitydescriptormetadata.h
buffered_media_res.cpp
clientcatalog.h
myxmldocument.h
tmpfile_tests.cpp
policy.cpp
virtualenvmanager.h
vreg_token_generator.h
file_utils.hpp
activexpackagerbinderhelper.cpp
packagegroup.h
@USVWATAVAWH
virtualenvtask.h
RpcServerUseProtseqEpW
fileassoc.h
activitytransactionmap.h
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
softgriddcserver.cpp
svcapiclnt.cpp
copyinstallfilespage.cpp
venv_process_runtime.cpp
packagegroupschemacompatibilitytests.h
.?AVCSecurityDesc@ATL@@
resourcefactory.cpp
base64encodingtest.cpp
applicationlistdetector.cpp
threadmgr.h
envtracker.cpp
iis_monitor.h
loadedcomponentoverridecontroller.cpp
nativepackagingsubsystemfactorytests.cpp
streamingactivities.cpp
compublishingoperation.cpp
mockownershipstore.h
sftmediaresource.cpp
procutils.h
socket.h
documentstoreenumerator.h
_o_terminate
creatingtransformpage.cpp
parsed_vfs_decoder.h
streamingactivitytests.cpp
temp_directory.hpp
|$(H9|$0t
commandlineparsertests.cpp
controllertests.cpp
dataretrievertests.cpp
buffer_copy.hpp
appid_utils.cpp
sftlpresult.cpp
deploy_sa.cpp
rtspserviceprovider.h
appidmgr.cpp
constraints.hpp
RtlLookupFunctionEntry
sp_ve_wrapper.cpp
_o__stricmp
thread.h
shared_errors.h
logfilter.cpp
mockserverrecord.h
filesystemmetadataenumeratormock.h
xmlelement.h
manager.h
seqcli_test.cpp
clientdefinitionstest.cpp
CommonProgramFiles(x86)
\$0M;
shortcut_ownership_store.h
mapi_client.h
D95`[
cblist.cpp
vfs_section_reader.cpp
QueryPerformanceCounter
.?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@
subsystem_module.cpp
swosdmgr.h
fileiothread.h
mocksettingmanager.h
vfonts_runtime.h
context.cpp
setuputils.hpp
CreateThreadpool
registry_interception_test_plugin.cpp
browserpluginpackager.h
packagegroupdescriptordocument.cpp
dll.cpp
com_error.h
wmi_metadata.h
uphpackagerregistry.cpp
virtualinifile.cpp
iprocesslauncher.h
serviceinclusionmgr.cpp
desktopconfig.h
sequencersqmut.cpp
register_command.hpp
mockmachinecatalogplus.h
uphpublisher.cpp
xmlelementimpl.cpp
StringFileInfo
shortcut_manifest_test.cpp
packagexmldiffertest.cpp
installationreportpage.cpp
subsystem_packager.h
mtypecmd.h
virtualcom.cpp
mockimpersonator.cpp
mockuserinfo.cpp
sxs_registrator.h
ole32.dll
mockcachedregistry.h
xmlprocessingmock.cpp
mock_catalog.h
secchannel.h
extensionpoint.h
sessionqueuemock.cpp
virtualserviceagentipc.h
sqmuploadmanager.cpp
logformatter.cpp
mockvirtualenvironmentutils.cpp
sequencerdialog.cpp
registry_staging_process_runtime.cpp
softwareclientpackager.cpp
packagemachinepolicydocument.h
vfont_ipc_server.cpp
namemappers.h
vregpage.cpp
.text$mn
GetSecurityDescriptorGroup
mocktransport.h
clientmodeactivitytests.cpp
tN@8p
notification_listener_impl.cpp
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
subsystem_ve_wrapper.h
vs_registrator.cpp
mockcommandlineparser.h
mockpackageuserpolicyfactory.cpp
osgfileio.cpp
removepackagetest.cpp
activitybucketinstancetracker.h
fileassocbuildertests.cpp
mockcompackagerbinder.cpp
gpfile.cpp
policyidmanager.h
vs_utils.h
mockmachinepackagegroupplus.h
usrctxutil.cpp
threadpool.cpp
dighashtable.h
mockcomponentloader.cpp
.?AVbad_array_new_length@std@@
appdata_timestamp.h
swinterface.stub.cpp
segmenttranslator.cpp
validate.cpp
clientintf.h
helperio.h
fecserver.h
namespace_impl.cpp
retrieveinstructionspage.cpp
process_terminator.cpp
subsystem_tokenizer_collection_tests.cpp
fsod_process_runtime.h
integration_manager_factory.h
sample_process_monitor.h
expandstr.cpp
sample_monitor.cpp
EventWriteTransfer
http.cpp
encodererrors.h
office_interface.cpp
managed_swexception.hpp
Microsoft Operations Puerto Rico1'0%
object_hooks.cpp
service_config_reader.h
stateactivities.h
detectorresult.h
mockclientconfiguration.cpp
sfhs_runtime.cpp
fileiothread.cpp
venv_configurator.h
browserpluginregistrator.h
sxspathmanager.cpp
D$@E3
applicationlistenumerator.stub.cpp
Rpcrt4.dll
vreg_runtime_configurator_test.cpp
test.cpp
apptest.cpp
cphook.h
catalog.h
swfileutilmock.cpp
virtualenv.h
roaming_interface.cpp
UnloadUserProfile
policydocumenttests.cpp
.?AVCDacl@ATL@@
sendrequesttests.h
sequencersetupactions.cpp
notification_order_manager.h
vfs_process_runtime.cpp
fta_rpc_server_api.cpp
impersonator.cpp
iis_manager.h
lfs.h
osgprocess.h
get_name_and_domain_tests.cpp
runtimecfgwizpage.h
Microsoft Application Virtualization Client Shell Notifier
integration_status_store.cpp
rpc_sec_test_c.c
xmlutilstest.h
applypatch.h
devirtualizer.cpp
clientcommontests.cpp
clientlog.cpp
isvapitests.cpp
registry_api_key_factory.h
mockpolicyidmgr.cpp
8A^_^[
IsDebuggerPresent
loggingsessionut.cpp
rpcutils.h
mockmanifestdocument.cpp
encodecp.cpp
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
iSHp6
test_devicedriver.cpp
.rdata$zETW1
browsefiledlg.cpp
fsmetadata_ut.cpp
runtimecfgsearchresult.h
package_path_utils.cpp
unknown.file
@A_A^A\
gpobject.h
security.h
user.cpp
fsdismountmananger.cpp
activitytestsbase.cpp
clnterr.h
RtlVirtualUnwind
issuecode.h
shellextensionenumerator.cpp
wsH9Q
activexpublishoperations.cpp
_o__crt_atexit
|$ UH
D$pHcH
geturlrequesthandletest.h
integration_ownership_store_tests.cpp
configuration.cpp
ssrs_registrator.h
test_publishserverfactory.cpp
wow64_mapper.cpp
httpproxyconfigtest.cpp
get_name_and_domain_tests.h
packagemachinepolicydocumenttests.cpp
serverconfiguration.h
endpoint_mapper.h
virtualizationmanagerexportstests.cpp
geturlresponsetest.cpp
manifestxmlprocessingtest.cpp
mobjectcmd.h
20180915045639.185Z0
applicationlistview.cpp
managescriptsdialog.cpp
mocksubscriber.cpp
vregvisitor.cpp
mock_manifest_reader.h
service_table.cpp
fileserverpackage.h
vreg_runtime_configurator.cpp
publishmanager.cpp
manifestdocument.cpp
seccallback.cpp
servicedatatypes.h
subsystem_errors.h
basicenumeratordetector.h
scheduledtaskmgrtests.cpp
service_information.hpp
mutex.h
releasetransportbuffertest.h
swminidump.cpp
servicebasics.h
sock.h
service_metadata.h
packagegrouprefreshhelpertests.cpp
SHChangeNotify
mockpackageconfigmanagerplus.h
swlog.cpp
.CRT$XCA
mocks.h
packager.hpp
sfterrors.h
unsupporteddriverdetectorut.cpp
integration_errors.h
KERNEL32.dll
commands.hpp
catalogimpl.h
savagentunittest.cpp
filesystemmetadataimpl.h
savsetupactions.cpp
filetypespage.cpp
blockmap.cpp
publishoperationstests.cpp
error_information.cpp
filesystem_writer.h
transactiontests.cpp
streammapdocument.h
reportingcomponenttests.cpp
shell_notification_manager_impl.cpp
pathresolver.cpp
mockusercatalogplus.cpp
UnhandledExceptionFilter
mockscriptbuilder.hpp
packagemock.h
sxs_registrator_tests.cpp
EventUnregister
devirtualizer.h
vreg_token_generator.cpp
appx_shortcut_manifest.h
clientmodeactivities.h
U0S0Q
packagepathmanager.cpp
saxsearch.cpp
io_operations.hpp
wmi_provider_host_hooks.cpp
connecttest.cpp
registry_staging_policy_staging.h
extensionpointexclusiondatafactory.hpp
monitoringsessionsavedstate.cpp
shellextensionsregistrator.h
genericfsinterface.h
com_monitor.h
short_paths.hpp
misc.h
httpdcresource.h
basexmlparser.cpp
xmlfile.cpp
getresponseheaderstests.h
mockpackagegroupdescriptordocumentplus.h
_o___std_exception_destroy
test_publishcomponent.cpp
coexistence_checks_tests.cpp
sessionimpl.h
xmldll.h
VS_VERSION_INFO
servicegeneralpage.cpp
.?AVCSid@ATL@@
cswatcher.cpp
componentloadertests.h
api-ms-win-core-synch-l1-2-0.dll
installvfs.cpp
uphregistrator.cpp
options.h
control_message.hpp
uiwizard.cpp
baselog.h
publicapitests.h
A_A^_^]
filetypelistview.cpp
comhelper.h
.CRT$XCZ
mockpackagemachinepolicyfactory.h
policyidmanager.cpp
streaminguxprocess.cpp
\$(H;
sfttofsmetadataconverter_ut.cpp
swmonitorshelltasks.cpp
namespace.cpp
endpoint_mapper_errors.h
rtp.cpp
transactionscheduler.h
packagegroupfactorymock.cpp
vfonts_configurator.cpp
rpc_sec_test.h
map/set<T> too long
sgsuite.cpp
msgbox.h
transformsoptimizationwriter.cpp
integration_package_store.cpp
mockutilities.h
subsystem_deployment.h
binaryinjector.h
sgerr.h
sample_process_runtime.h
catalogrc.h
registryconfigitem_test.cpp
predictivestream.h
packageinformationwrappertests.h
mockshortcutmanifestinterface.cpp
mockstoreutils.cpp
multiloadtask.cpp
.CRT$XPA
ubM;}
legacyexception.h
packagelockmgr.cpp
.data
scriptconfigitem.cpp
nCipher NTS ESN:57F6-C1E0-554C1+0)
mock_vreg_token_generator_results.h
dcrefresh.cpp
integration_status_store_tests.cpp
mockprocesslauncher.h
manifestdocprovider.h
registry_staging_package_info.h
listeneripc_c.c
registryaccessortest.cpp
notification_listener_impl.h
publishserverfactory.cpp
wmi_class_entry_test.cpp
config.h
runtimecfgsearchdialog.cpp
trayicon.h
scm_stopwatch.cpp
InitializeSid
createprocessserver.h
savepref.h
memset
fta_rpc_server.h
shellextensionsrpcserverapi.cpp
clientservicerc.h
mockintegrationmanager.cpp
G0tKL
av_event_handler.hpp
0A_A^A\_^][
minidumpwriter.cpp
clientexception.cpp
internals.cpp
processterminatormock.cpp
swfilemgr.h
msystemcmd.cpp
error_information.h
wmi_snapshot_test.cpp
.?AVfta_rpc_server@@
mockpackagemachinedocumentimpl.cpp
notificationordermanagertests.cpp
vservices_process_monitor.cpp
stateactivitytests.cpp
iperformancecounterreader.h
iconfigitem.h
GetProcAddress
com_ut_error.cpp
virtual_environment_manager.h
.?AV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
u)A8y
com_registrator.cpp
ProductName
policy.h
mocktransactionscheduler.cpp
raw_vfs_decoder.h
propertystoreimpl.cpp
An invalid formatted log message was thrown away
blocklist.h
packagegroupfactorymock.h
mockdataretriever.h
detectorerrors.h
strrchr
Microsoft Corporation1.0,
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
clientapi.cpp
9E;x sRH
iis_runtime.h
clntprefmoc.h
sp_server.cpp
documentstoreimpl.h
test_new_parser.cpp
shellextensionsnotifieripc_c.c
runtimecfginieditdialog.cpp
clientmanager.h
fsdismountmanager.h
filesystem_writer.cpp
scriptinginterface.cpp
.idata$6
appvclientcomconsumertest.cpp
iis_registrator.h
catalogfactorymock.cpp
vreg_token_generator_test.cpp
mutualauth.cpp
mockclienthost.h
packagegroupmock.h
connectedproc.h
manifestdocumentfactorymock.h
mockclienteventsink.h
syncdef.h
mockpackageuserdocument.cpp
.?AVCAce@CAcl@ATL@@
mservercmd.cpp
Microsoft Time-Stamp Service
_o__wtoi
log.h
mpackagecmd.cpp
oostest.h
xml_variants.hpp
macros.h
hive_manager_impl.cpp
registry_staging_deployment_test.cpp
AddAce
clientactivitytypes.h
manifestdocumentfactorymock.cpp
um_pmdevice_object.h
cleanupregistryaccessortest.cpp
encoder.h
unsupporteddriverenumerator.cpp
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
Q0tKL
activexregistrator.cpp
Failed to Start Shell Extensions RPC Server. endpoint: %1%, protocol seq: %2%, Error Code: %3%.
swapp.h
swrpcserver.cpp
dsftmediaresource.h
shellextensionspackager.cpp
vservices_config_reader.h
connectionmanager.cpp
_o_malloc
com_ve_wrapper.h
fta_registrator.h
FileVersion
vs_ve_wrapper.cpp
HeapSize
notifier_manager.hpp
exports.cpp
package_path_utils.h
mockclienthost.cpp
vfont_ipc_server.cpp.good.cpp
virtualapplicationregistrator.h
subsystem_registrator.h
sample_runtime.h
SVWAVH
streammapdocumentimpl.cpp
transportstub.cpp
Microsoft Corporation1&0$
removepackagetests.cpp
CommonProgramW6432
installpage.h
test_old_parser.cpp
client_request_proxy.h
1(0&0
180703204550Z
coexistence_checks.h
uploadmgr.h
diffsfterrors.h
iis_wmi_provider_6.cpp
mockdirectorydaclmanager.hpp
filesystemcmd_tests.cpp
mimeserver.cpp
cp_thread.cpp
xmlconfigitem.cpp
schannelsocket.h
rsodinterface.cpp
sample_registrator.h
lifetimetests.h
(D$0f
runtimecfgapplicator.cpp
vcruntimedetector.cpp
transportinterface.h
sgsftldrexceptions.h
clientintf.cpp
fA9Z*v$A
A_A^_
tcpsock.cpp
_o_exit
hive_file_utils.hpp
getdatatest.cpp
saxutils.h
ut_vreg.cpp
mock_manifest.hpp
assocmgr.h
xmlutils.cpp
launcher.cpp
mockcontrollerrequests.h
?uncaught_exception@std@@YA_NXZ
impersonatormock.h
opcheck.h
file-fat.cpp
shellextensionspublishingoperation.cpp
rtsprequest.cpp
threadsyncdata.h
rcerrors.h
mockcontrollerinternal.cpp
activitydatacachetests.h
subsystem_visualizer.h
subsystem_manager.cpp
vfs_rename_tests.cpp
Unknown exception
wmi_metadata.cpp
.?AV?$_Iosb@H@std@@
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
control_manager.cpp
pendingtaskmanagerisv.h
medialocatormanager.hpp
api-ms-win-crt-runtime-l1-1-0.dll
utils.h
valuename.h
httppublishservertests.h
pptauth.h
filesystemmetadatatests.h
RPC server start failed in notifier process on endpoint '%1%' with error: '%2%'
subsystem_runtime.h
mockcompackagerreader.cpp
xA_A^A]A\_^[]
inisearch_test.cpp
fF94zu
appvstreamingengine.cpp
catalogexportstests.cpp
Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0
settingwatcher.h
xml_interface.hpp
clientpackageutilitiesmock.h
__std_terminate
environment.cpp
service_request_proxy.cpp
MakeAbsoluteSD
Shell notifier is starting up.
subsystem_utils.h
D$PH;
ut_driver_console.cpp
printerdriverdetectorut.cpp
packageregistrymock.cpp
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
savepref.cpp
mockmachinecatalogplus.cpp
control_dispatcher_ipc.cpp
requeststate.cpp
shortcutserver.h
processlauncher.h
assetintelligencewrapper.h
filterrequestprocessor.cpp
EventRegister
vcom_deployment_test.cpp
connection_test.cpp
pendingtaskmanagerent.cpp
setupconfig.cpp
iis_visualizer.cpp
clientwarning.cpp
encoderopts.cpp
clientactivitytests.h
finddependencies.cpp
reportappstatustest.cpp
integration_commands.cpp
A_A^_^]
CoInitializeEx
runtimecfgpage.cpp
pooledthread.cpp
installutils.cpp
HeapAlloc
ProgramW6432
getresponseheaderstests.cpp
virtualization_manager.cpp
cphook.cpp
irtpsock.h
encoderview.h
activity_data_cache_impl.h
removepackageactivitytests.cpp
setupengine.h
crypt.cpp
Failed to delete a pinned shortcut. Windows error code %2%, Detokenized path: '%1%'.
multiloadtask.h
mockpackagemachinedocumentimpl.h
checkhybridconnectionrulestests.h
embeddedscriptparser.h
schannelsocket.cpp
sp_visualizer.cpp
userinfo.h
hive_file_utils_test.cpp
vreg_runtime.h
.data$brc
L$pH3
clientsync.h
clienthostrc.h
muoptin.h
H3E H3E
InternalName
packagefactory.h
utilities.h
swiconmgr.cpp
sftlpresult.h
subsystem_process_runtime.h
wmi_visualizer.h
sppublish.cpp
icleanupcoordinator.h
fA94@u
httppublishserver.h
xmlutilsmocks.hpp
expandstr.h
manifestutilitiestest.cpp
vregsearch_test.cpp
embeddedscriptparsertests.cpp
swiconmgr.h
mockcontrollerrequestplus.cpp
IsProcessorFeaturePresent
swfileutilmock.h
upgradesetupactions.cpp
mockcontrollerrequestplus.h
config.cpp
dcomdetectorut.cpp
activitycoordinatorimpl.h
getlicensetest.cpp
saxsearch.h
sample_ve_wrapper.cpp
mockcatalogplus.h
.rsrc$02
pubutils.h
test_fileserverpackageversion.h
httpproxyconfigtest.h
?_Xbad_alloc@std@@YAXXZ
userpolicyapplierimpl.h
extra_fields.h
sec9_reader.h
sqmsender.h
publishcomponent.h
rtspworkitems.h
osguardfileimpl.cpp
shell_notification_manager.cpp
jigsawsftprocessor.stub.cpp
xmlparserimpl.cpp
applicationlistenumerator.cpp
catalogmanager.cpp
mockclientsession.cpp
coordinatortests.cpp
base_vfs_decoder.h
coordinator.hpp
packagetests.h
sxs_registrator.cpp
vservices_process_runtime.h
wow64_mapper.h
vcruntimedetector.h
platform.h
kernel32.dll
sessionmock.cpp
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
feccontext.h
reportingrc.h
VirtualServiceRequestMgr_c.c
rtsp.h
mappacc.h
_o_iswdigit
.text$di
ftaction.h
stateactivities.cpp
sessionqueuetests.cpp
.?AV_Facet_base@std@@
sample_process_monitor.cpp
upgradesetupactions.h
H;Q L
scriptmanager.h
VWATAVAWH
launchtask.cpp
migrateuser.cpp
istream.cpp
lock.cpp
shortcutbuilder.cpp
connectionmanager.h
vfs_create_test.cpp
processpathtrackertests.cpp
device_name_mapper.cpp
documentstoremock.cpp
mfilesystemcmd.h
xmlutils.stub.cpp
pathhelper.h
mock_vfs_runtime_configuration_loader.cpp
sessionqueue.h
reg_config_test.cpp
GetCurrentProcessId
datadirectoriesutilities.cpp
registry_api_template.cpp
packageinformationwrappertests.cpp
"Microsoft Time Source Master Clock0
_o__wcsicmp
mockstreaminguxprocessapi.h
I0G1-0+
frontend.h
com_monitor.cpp
transportapiwrapper.h
xmlutils.h
PERFORMANCE
sysroot_mapper.h
sec9_reader.cpp
.rdata$zETW0
fileserverpackageversion.h
aclutilsmock.h
utils.cpp
CreateThreadpoolWork
mockusermanager.cpp
savserv.h
mocknotificationmanager.h
isv_notification_listener_impl.h
mockclientcomponent.cpp
msgbox.cpp
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
pubutils.cpp
policymock.cpp
vreg_runtime_configurator.h
RpcServerRegisterIf2
swcore.h
mocktransaction.h
mockmanifestdocumentplus.cpp
virtual_service_request_proxy.h
explodecabpage.cpp
interfacetests.cpp
utsyncobject.cpp
iis_msdeploy_iis6_provider.cpp
usertokenmanager.cpp
WaitForSingleObjectEx
savsetupca.cpp
mockapplicationinfostore.cpp
jpapp.h
encoderutils.cpp
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0_Lockit@std@@QEAA@H@Z
subsystemcontrollerexportstests.cpp
shortcut_rpc_server::start_rpc_server
runtimecfgsearch.h
reportingcomponent.h
mcommand.cpp
cachemanager.h
UTCReplace_AppSessionGuid
fE9$Iu
propertiesreader.cpp
usermanagertests.cpp
suite.cpp
browserpluginpublishoperations.cpp
performancecounterreader.cpp
policy_adapter.h
xmlattributeimpl.cpp
launchrecord.h
registry_staging_policy_staging.cpp
sysroot_mapper.cpp
virtualenvtask.cpp
globals.h
mockvirtualenvironmentutils.hpp
shellnotifycommand.hpp
wmi_subsystem_utils.h
applicationlistdetector.h
clientapimock.cpp
vfonts_process_monitor.h
@USWH
dcassoccreator.cpp
CreateThreadpoolCleanupGroup
settingcachetests.cpp
valuenametest.cpp
unpublishpackagetests.cpp
uiwizard.h
sec1reader.cpp
activitybucketinstancetrackerimpl.cpp
pendingtaskmanagerenttests.cpp
fileutilities.hpp
.CRT$XIZ
activitycoordinatortests.cpp
registry_staging_config.cpp
.?AV?$lock_holder@Vcritical_section@shared@softricity@@@shared@softricity@@
dsapp.cpp
shortcut_file_check.hpp
packagefileadapter.h
runtimecfgregeditdialog.h
subsystem_tokenizer_collection_factory.h
??0facet@locale@std@@IEAA@_K@Z
!This program cannot be run in DOS mode.
object_hooks.h
H9Ahs
catalogmanagertests.cpp
configurepackageactivitytests.cpp
cblist.h
mockactivitymanager.h
command_line_cleaner.hpp
appdatatimestamptests.cpp
usercontext.cpp
vfonts_monitor.cpp
errorsetter.cpp
FTA RPC Server: Failed to queue shell notify task: %1%.
clientconfiguration.h
createprocesscommand.cpp
transaction_manager.cpp
muoptin.cpp
serverregrecord.h
iis_msdeploy_wrapper.h
packageinfo.cpp
mockfileserverpackage.cpp
filesystemmetadatadocfactory.cpp
servicelogonpage.cpp
serverconfigurationtests.cpp
mockpackagepathmanager.hpp
activitybucketinstancetrackermock.cpp
Redmond1
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
istreaminguxprocessapi.h
swfile.h
httpstreamingresource.cpp
datadirectoriesutilities.h
$A9A
A^_^[]
applicationmanager.h
ntainterface.h
dcservermgr.h
agentlistener.h
security_manager.cpp
iis_wmi_provider_6.h
caboperationpage.cpp
vobjects_utils_tests.cpp
wmi_subsystem_utils_test.cpp
vregeditdlg.h
rtspresourcemanager.cpp
jitv_runtime.h
USER32.dll
GetCurrentThread
httprequest.cpp
filetype.cpp
background_load_task.h
vfs_query_dir_test.cpp
dcserver.h
virtualservicesreader.h
devicedriver.cpp
agent.cpp
apppath_packager_subsystem.cpp
customvisitor.cpp
vregsearch.h
vservices_process_runtime.cpp
.?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@
virtualapplicationpackager.cpp
dataretriever.cpp
service_metadata.cpp
vfs_runtime_configuration_loader.cpp
logformatter.h
base64encoding.cpp
wmi_snapshot.h
r~akow
jigsaw.cpp
propertystore.h
shortcut_handler.stub.cpp
registry_staging_runtime.cpp
HeapSetInformation
vfontsbuilder.h
EnterCriticalSection
streaminguxmanager.cpp
.CRT$XCU
mockclientcatalog.cpp
customdata.h
mockpackagegroupdescriptorfactory.h
nullusercatalog.h
packagegroupdescriptordocumentfactorytests.cpp
mocknotificationmanager.cpp
mockclientsessionplus.cpp
createprocessserver.cpp
"2 X6
virtual_environment_manager.cpp
packageinformationwrapper.h
_o__get_wide_winmain_command_line
(D$PL
assocmgr.cpp
activexpackager.h
service_process.cpp
getmetadatatest.cpp
reflectedsinglenode.h
mockpackagegroupdescriptordocument.cpp
registry_staging_package_info.cpp
clientimpl.cpp
xmlconfigitem.h
vshell_runtime.cpp
Failed to queue Shell notification task.
fsinter.h
invalidmanifestdetector.h
registry_api_action.h
extra_fields_test.cpp
crypto_utils.cpp
swlog_stub.cpp
crypto_utils.h
applicationinfostore.cpp
mockclientcatalog.h
oK0D$"<
swosdmgr.cpp
transportcallback.cpp
createprocessipc.h
mockcleanupmodule.h
systemmock.cpp
iis_metadata_mgr.h
GetCurrentProcess
iis_binding.h
treeenumeratortests.h
Microsoft.Windows.AppMan.AppV
thread.cpp
folderredirectiontasktest.cpp
sessionmanagerfactoriestests.cpp
jigsaw.h
virtual_process.h
iservice_config_reader.h
jgssession.cpp
vobjbuilder.cpp
printerdriverdetector.cpp
filetype.h
dcomobjectenumerator.h
service_request_proxy.h
packagemachinepolicydocumentfactorytests.cpp
reportingqueue.cpp
vfshelper.cpp
related_name_resolver.cpp
reg_tests.cpp
terminalhandler.cpp
proxysettingpage.cpp
doserviceprovider.h
core_ipc_servers.h
dcutils_tests.cpp
security_descriptor_metadata_ut.cpp
configuresoftwarepage.cpp
enterprise_policy_adapter.h
releasetransportbuffertest.cpp
clientcommonoverrides.cpp
scriptbuildertests.cpp
settingmanagertest.cpp
integration_package_store_tests.cpp
reportexporter.h
mockbase64encoding.cpp
sgsec8fileiotraits.h
swguidclass.cpp
servicespage.cpp
.?AVShellExtensionShellNotifyTask@ShellExtensions@Subsystem@AppV@@
filesystemmetadatadoc.cpp
L;A s
overrides.h
applicationlistdetectorut.cpp
stub_msgbox.cpp
activities.cpp
swcore.cpp
mock_endpoint_mapper.cpp
appdata_timestamp.cpp
Translation
gpfile.h
mockpublishclient.hpp
io_operations.cpp
mockcompackagerwriter.h
vfsbuilder.cpp
ireport.h
FUNCTION
clientactivity.h
publishdlg.cpp
usrstate.cpp
rtp.h
isv_process_notifier.hpp
sessionmanager.h
appid_utils.h
ShellExt
vfs_lookup_tests.cpp
cswatcher.h
streaminginterfacetest.cpp
vs_monitor.h
csgtest.cpp
installtask.h
trickle_tests.cpp
sequencersqm.h
vfs_runtime_configuration_loader.h
losteventsdetectorut.cpp
.?AV?$basic_istream@_WU?$char_traits@_W@std@@@std@@
swlog.h
httpdcresource.cpp
stringutils.hpp
_o__callnewh
sgrpcclient.h
myxmldocument.cpp
metadatatreeenumerator.h
packagemachinepolicydocumentfactory.cpp
mock_impersonator.cpp
catalogmock.h
datadirectoriesmock.cpp
vs_visualizer.h
vfs_policy_test.cpp
systemmock.h
com_ut_catalog_snapshot.cpp
usermgr.cpp
vfsbuilder.h
.CRT$XIAC
authtask.h
impersonation.h
settingmanager.h
mockcachemanager.h
connecttotask.cpp
mockisvhost.h
ProductVersion
device_name_mapper.h
virtualapplicationcollectorimpl.cpp
scriptingcomponent.cpp
mocktransactionscheduler.h
shellextensiondetectorut.cpp
Shell notifier is shutting down.
roaming_integration_manager.cpp
settingwatchertest.cpp
filelist.h
sessionqueueimpl.cpp
subsys_reg.cpp
__CxxFrameHandler3
vcom_process_monitor.h
filetypeaction.h
IsValidSid
iis_monitor.cpp
encodevfs.cpp
applicationbuilder.cpp
venvvarrewritertest.cpp
setupconfigtest.cpp
iis_msdeploy_wrapper.cpp
.CRT$XIAA
nofs.h
cancelresponsetest.cpp
scriptbuilder.cpp
orchestration.cpp
propertystoretests.h
createpackagepage.cpp
A_A^A\_^[]
runtimecfgsearchtask.cpp
mockclientmanager.h
.?AVshortcut_shell_notify_task@shortcut@AppV@@
xmlprocessing.cpp
Windows
SleepConditionVariableCS
uninstallsetupactions.h
SUVWATAVAWH
vfs_uploaddownload.cpp
~%HcJ
isvhost.h
clientcomponentmock.cpp
isvapi.cpp
dcomobjectenumerator.cpp
extensionpointdatareaderutils.hpp
dcutils.h
createcabpage.cpp
publishingactivities.h
.idata$2
SubmitThreadpoolWork
control_dispatcher.cpp
x AVH
vfs_filesys_test.cpp
.CRT$XCL
desktopconfig.cpp
path_and_data_parser.cpp
1/0-0
cliapplicationlauncherut.cpp
savcfg_crypt.cpp
savagentrpcmock.cpp
apppathpackagerwriter.cpp
packageuserpolicydocumentfactorytests.cpp
ifilesearch.h
isvnotificationlistenertest.cpp
browserpluginpackagerbinder.cpp
savserv.cpp
iis_deploy.h
metadatahandler.cpp
xmlsearch.cpp
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
winhttpresponse.h
getpackageguidtest.h
.tls$
streaming_manager_errors.h
@UAVAWH
mappcmd.cpp
ssrs_visualizer.h
fileexclusiondetector.h
globalcp.cpp
wmi_registrator_test.cpp
namespace_impl_mock.cpp
mockmanifestdocument.h
notificationmanager.cpp
documentstoretests.cpp
jgssession.h
metadatalistenumerator.h
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
L$0I;
devirtualizer_errors.h
documentstoremock.h
transportimpl.h
.xdata
mock_notification_order_manager.hpp
endinstallpage.cpp
nativesubsystemprovidertests.cpp
virtualprocessactivitytests.cpp
mockpackagerwriter.h
isvparameters.cpp
exclusionlist.h
vfs_config_manager_mock.cpp
packageenumerator.h
applicationinfostore.h
mock_folder_redirection_task.cpp
.gfids
T$xI;
sgclientdlg.cpp
reflectionmanager.h
clientcataloginterfacetests.h
setupengine.cpp
subsystems.cpp
subsystem_process_monitor.h
mock_swrpcserver.cpp
genericshellnotify.cpp
190726204550Z0p1
Operating System
saxutils.cpp
mockpublishingconfigurations.h
vshell_runtime.h
RpcServerRegisterIf3
sfhs_runtime.h
mock_io_operations.cpp
activity_data_cache.h
virtualfilesystem.h
catalogmanagertests.h
vector<T> too long
N0L0J
runtimecfgutils.h
reportlogmessagetest.h
directorydaclmanager.hpp
virtualapplauncher.cpp
sendrequesttests.cpp
datapointlogger.cpp
Integration
tranclnt.h
packageenumerator.cpp
unittestglobals.h
integration_main.cpp
notification_order_manager_impl.h
applicationinfostoretests.cpp
.?AVLog@AppV@@
locator.cpp
shortcut_rpc_server_api.cpp
subsystem_utils_vnext.h
GetSecurityDescriptorOwner
sxspublictoprivate.cpp
sftheaders.cpp
swinterface.cpp
log.cpp
reportmgr.h
reportsheetwriter.h
complusdetector.cpp
_o_calloc
stdafx.h
fileinfo.h
mock_subsystem.h
losteventsdetector.h
loadedcomponentoverridecontroller.h
packageregistry.cpp
vfsvisitor.cpp
subsystemcontrollertest.cpp
mockclientsessionlist.h
osgsection.cpp
t$ WATAUAVAWH
GetLastError
@USVWATAUAVAWH
loadtask.h
vobjects_process_runtime.h
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
encoderdoc.cpp
dccmgripc.h
AuthD
dsftmediaresource.cpp
transaction.cpp
clientnotifyimpl.h
mapi_server.cpp
p WATAUAVAWH
virtual_service_control_manager.h
policyapplierloadtests.cpp
runtimecfgeditscriptpage.h
getresponsepayloadtests.h
servicebundle.h
helper.cpp
runtimecfgwizpage.cpp
metadatalistenumerator.cpp
savepackagepage.cpp
rtspdata.cpp
swfilemgr.cpp
sftmediaresource.h
streamingmanagertest.cpp
com_catalog_snapshot.cpp
transformsheaderwriter.cpp
manifestutilitiesmock.cpp
fD94Gu
scriptbuilder.h
integration_store_util_tests.cpp
launchrecord.cpp
basexmlelement.h
transporterrors.h
idesktopcontent.h
stubs.h
ipublishclient.h
runtimecfgsubsystemeditdialog.cpp
servicedependencypage.cpp
iis_wmi_provider_7.h
fec_c.c
H;w sz
rtspservicemanager.h
index.hpp
clientservicetests.cpp
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
enterprise_utils.hpp
oldcatalogmanager.cpp
mockvirtualservicesreader.h
applicationinfo.cpp
mservercmd.h
packageinfo.h
u&H9Q s
assetintelligencewrappertests.cpp
virtualizationmanagertest.h
registry_api_value.cpp
s_IShellExtensionNotify_ShellNotify
A_A^A]A\]
mockevents.h
integration_subsystem_data.h
foldertree.stub.cpp
CopySid
mock_ownership_store.h
bulkprogress.h
fileutils.cpp
creatingpackagepage.cpp
virtual_service_agent.h
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
packageimpl.cpp
http.h
`.rdata
securitydescriptormetadatareader.h
icleanupmodule.h
customdata.cpp
manifestutilitiesmock.h
packageuserpolicydocumentfactory.h
uninstallsetupactions.cpp
shortcut.h
streaming_manager.h
reportentry.h
n<NULL>
policyfactorymock.h
rtspproxyconfigtest.cpp
.?AVscope_guard_func@utility@appv@@
virtualenvironmentutils.h
documentstoreenumeratormock.h
ssrs_monitor.cpp
managedpath.cpp
activityclienttests.h
sw.cpp
policyerrors.h
virtualizationmanagertest.cpp
packageavailabilitymaptests.cpp
activitymanager.h
20180915002813Z
wmi_error.h
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | PDB Path | Compile Time | Import Hash |
|---|---|---|---|---|---|---|---|
| 0x140000000 | 0x000100e0 | 0x00043f12 | 0x00043f12 | 10.0 | AppVShNotify.pdb | 2104-04-02 12:51:03 | 8eff6da1273f73b87836f1e27fffb536 |
Version Infos
| CompanyName | Microsoft Corporation |
|---|---|
| FileDescription | Microsoft Application Virtualization Client Shell Notifier |
| FileVersion | 10.0.17763.1 (WinBuild.160101.0800) |
| InternalName | AppVShNotify.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | AppVShNotify.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.17763.1 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x00011915 | 0x00011a00 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.14 |
| .rdata | 0x00011e00 | 0x00013000 | 0x00020552 | 0x00020600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 4.78 |
| .data | 0x00032400 | 0x00034000 | 0x000015f0 | 0x00000e00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 4.10 |
| .pdata | 0x00033200 | 0x00036000 | 0x00001248 | 0x00001400 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 4.84 |
| .rsrc | 0x00034600 | 0x00038000 | 0x00000450 | 0x00000600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 2.60 |
| .reloc | 0x00034c00 | 0x00039000 | 0x0000193c | 0x00001a00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ | 5.41 |
Overlay
| Offset | 0x00036600 |
| Size | 0x00002210 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| RT_VERSION | 0x00038060 | 0x000003ec | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.48 | None |
Imports
| Name | Address |
|---|---|
| EventUnregister | 0x140019570 |
| EventSetInformation | 0x140019578 |
| EventRegister | 0x140019580 |
| GetTokenInformation | 0x140019588 |
| SetSecurityDescriptorGroup | 0x140019590 |
| MakeAbsoluteSD | 0x140019598 |
| OpenThreadToken | 0x1400195a0 |
| GetLengthSid | 0x1400195a8 |
| InitializeAcl | 0x1400195b0 |
| InitializeSecurityDescriptor | 0x1400195b8 |
| OpenProcessToken | 0x1400195c0 |
| AddAce | 0x1400195c8 |
| IsValidSid | 0x1400195d0 |
| GetSecurityDescriptorOwner | 0x1400195d8 |
| InitializeSid | 0x1400195e0 |
| CopySid | 0x1400195e8 |
| GetSecurityDescriptorControl | 0x1400195f0 |
| GetSidLengthRequired | 0x1400195f8 |
| GetSidSubAuthority | 0x140019600 |
| GetSecurityDescriptorGroup | 0x140019608 |
| SetSecurityDescriptorOwner | 0x140019610 |
| GetAclInformation | 0x140019618 |
| GetSecurityDescriptorDacl | 0x140019620 |
| SetSecurityDescriptorDacl | 0x140019628 |
| GetSecurityDescriptorSacl | 0x140019630 |
| ConvertSidToStringSidW | 0x140019638 |
| EventWriteTransfer | 0x140019640 |
| Name | Address |
|---|---|
| GetMessageW | 0x140019838 |
| DispatchMessageW | 0x140019840 |
| TranslateMessage | 0x140019848 |
| Name | Address |
|---|---|
| _register_thread_local_exe_atexit_callback | 0x1400199a8 |
| _c_exit | 0x1400199b0 |
| _initterm_e | 0x1400199b8 |
| _initterm | 0x1400199c0 |
| Name | Address |
|---|---|
| memset | 0x1400199d0 |
| Name | Address |
|---|---|
| CoCreateInstance | 0x140019b90 |
| CoInitializeEx | 0x140019b98 |
| CoUninitialize | 0x140019ba0 |
| Name | Address |
|---|---|
| RpcBindingInqAuthClientW | 0x1400197d0 |
| RpcServerUseProtseqEpW | 0x1400197d8 |
| RpcServerUnregisterIf | 0x1400197e0 |
| RpcServerRegisterIf2 | 0x1400197e8 |
| RpcImpersonateClient | 0x1400197f0 |
| RpcRevertToSelf | 0x1400197f8 |
| RpcServerListen | 0x140019800 |
| RpcServerRegisterAuthInfoW | 0x140019808 |
| NdrServerCall2 | 0x140019810 |
| Name | Address |
|---|---|
| SHChangeNotify | 0x140019820 |
| SHCreateItemFromParsingName | 0x140019828 |
| Name | Address |
|---|---|
| UnloadUserProfile | 0x140019858 |
Usage
Processing ( 11.05 seconds )
- 10.311 ProcessMemory
- 0.717 CAPE
- 0.016 BehaviorAnalysis
- 0.008 AnalysisInfo
- 0.001 Debug
Signatures ( 0.06 seconds )
- 0.008 ransomware_files
- 0.006 antianalysis_detectfile
- 0.006 antiav_detectreg
- 0.005 ransomware_extensions
- 0.003 infostealer_ftp
- 0.003 ursnif_behavior
- 0.002 antiav_detectfile
- 0.002 infostealer_bitcoin
- 0.002 infostealer_im
- 0.002 poullight_files
- 0.002 territorial_disputes_sigs
- 0.001 antianalysis_detectreg
- 0.001 antivm_vbox_files
- 0.001 antivm_vbox_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 infostealer_mail
- 0.001 masquerade_process_name
- 0.001 revil_mutexes
- 0.001 modirat_behavior
Reporting ( 0.01 seconds )
- 0.006 CAPASummary
- 0.002 JsonDump
Signatures
The PE file contains a PDB path
pdbpath: AppVShNotify.pdb
SetUnhandledExceptionFilter detected (possible anti-debug)
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 4336 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 59 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Binary compilation timestomping detected
anomaly: Compilation timestamp is in the future
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
C:\Windows\System32\kernel.appcore.dll
\Device\CNG
\Device\CNG
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rpc\Linkage
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\SecurityService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\16
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\SspiCache
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SaslProfiles
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rpc\Linkage
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\SecurityService
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\16
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\SspiCache
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SaslProfiles
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\16
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\16
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.