Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-13 14:25:29 | 2025-06-13 14:56:58 | 1889 seconds | Show Options | Show Analysis Log |
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:15,350 [root] INFO: Date set to: 20250613T10:24:36, timeout set to: 1800 2025-06-13 11:24:36,129 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8 2025-06-13 11:24:36,144 [root] DEBUG: Storing results at: C:\XgITVWXU 2025-06-13 11:24:36,144 [root] DEBUG: Pipe server name: \\.\PIPE\QkIhwKCq 2025-06-13 11:24:36,144 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-13 11:24:36,191 [root] INFO: analysis running as an admin 2025-06-13 11:24:36,191 [root] INFO: analysis package specified: "exe" 2025-06-13 11:24:36,191 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-13 11:24:37,051 [root] DEBUG: imported analysis package "exe" 2025-06-13 11:24:37,051 [root] DEBUG: initializing analysis package "exe"... 2025-06-13 11:24:37,051 [lib.common.common] INFO: wrapping 2025-06-13 11:24:37,051 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-13 11:24:37,051 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\MusNotificationUx.exe 2025-06-13 11:24:37,051 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-13 11:24:37,051 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-13 11:24:37,066 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-13 11:24:37,066 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-13 11:24:37,301 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-13 11:24:37,316 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-13 11:24:37,348 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-13 11:24:37,363 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-13 11:24:37,363 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-13 11:24:37,363 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-13 11:24:37,363 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-13 11:24:37,379 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-13 11:24:37,379 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-13 11:24:37,379 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-13 11:24:37,379 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-13 11:24:37,379 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-13 11:24:37,379 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-13 11:24:37,379 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-13 11:24:37,379 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-13 11:24:37,379 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-13 11:24:37,379 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-13 11:24:37,379 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-13 11:24:37,676 [modules.auxiliary.digisig] DEBUG: File is not signed 2025-06-13 11:24:37,676 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-13 11:24:37,894 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-13 11:24:37,894 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-13 11:24:37,894 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-13 11:24:37,894 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-13 11:24:37,894 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-13 11:24:37,894 [modules.auxiliary.disguise] INFO: Disguising GUID to e3624786-bb4d-4b3d-ad96-f91b74fda1ff 2025-06-13 11:24:37,894 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-13 11:24:37,894 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-13 11:24:37,894 [root] DEBUG: attempting to configure 'Human' from data 2025-06-13 11:24:37,894 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-13 11:24:37,894 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-13 11:24:37,894 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-13 11:24:37,894 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-13 11:24:37,894 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-13 11:24:37,894 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-13 11:24:37,894 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-13 11:24:37,894 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-13 11:24:37,894 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-13 11:24:37,894 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-13 11:24:37,894 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-13 11:24:37,894 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-13 11:24:37,910 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-13 11:24:37,910 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-13 11:24:37,926 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini 2025-06-13 11:24:37,926 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-13 11:24:37,926 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-13 11:24:37,926 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-13 11:24:37,926 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-13 11:24:37,926 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-13 11:24:37,926 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-13 11:24:37,926 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\nJyNmW.dll, loader C:\tmp_gell1p8\bin\pgBxLdyq.exe 2025-06-13 11:24:37,988 [root] DEBUG: Loader: IAT patching disabled. 2025-06-13 11:24:37,988 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\nJyNmW.dll. 2025-06-13 11:24:38,004 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-13 11:24:38,004 [root] INFO: Disabling sleep skipping. 2025-06-13 11:24:38,004 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-13 11:24:38,004 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-13 11:24:38,004 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-13 11:24:38,004 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-13 11:24:38,004 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-13 11:24:38,019 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-13 11:24:38,019 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-13 11:24:38,019 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-13 11:24:38,035 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF8234D0000, thread 3632, image base 0x00007FF60D500000, stack from 0x0000008EFACF4000-0x0000008EFAD00000 2025-06-13 11:24:38,035 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-13 11:24:38,035 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-13 11:24:38,035 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-13 11:24:38,035 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\nJyNmW.dll. 2025-06-13 11:24:38,050 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-13 11:24:38,050 <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-13 14:25:29 | 2025-06-13 14:56:39 | none |
File Details
| File Name |
MusNotificationUx.exe
|
|---|---|
| File Type | PE32+ executable (GUI) x86-64, for MS Windows |
| File Size | 388096 bytes |
| MD5 | 03453d8f7a4ff9fb2bc656eb0f4c12fd |
| SHA1 | 648e94de1550a701cac9f5474a03284f9fcb1c07 |
| SHA256 | 6e346773a3f393e5143842870f82db0dd6bb739a69501b5248592832ed53826a [VT] [MWDB] [Bazaar] |
| SHA3-384 | 69d509ef44988553e74878f785d6cac1c86c9af2e33100e2c25410a15dc83442cb96fa05b4989a5b8805b1ff59a33e7e |
| CRC32 | D211B23F |
| TLSH | T195845B1B83DC0198E9BBD67981758E44E5B0BC592739D8CB0994089E1F33EE4993DB3B |
| Ssdeep | 6144:dtA2aMLWY+o/4WCqfaI1em3lXgw0yRDcgEgMGV+jd/ipr2TzP67g4Zbmg/ve2ds0:dtA2a0Wto/4WCqfaI1em3lXgw0yyoJE |
| PE | File Strings BinGraph Vba2Graph |
Full Results
| Engine | Result | Engine | Result | Engine | Result |
|---|
Error Originate:InteractiveToast::RegisterClassW:65
Auto Update\RequestedAppCategories
api-ms-win-core-kernel32-legacy-l1-1-0.dll
Cant download update dialog
pA^_^[]
@.data
RebootWithUX
PathCchRemoveBackslash
Error Originate:UpdateUtil::IsFeatureUpdatePending:1607
Error Originate:UXElementStore::GetXmlFilePath:1125
Dialog_RebootPostponeMgmt
WindowsCreateStringReference
ReleaseMutex
GetStartupInfoW
Warning:UpdateUtil::GetUpdatePayloadInfo:675
_initterm_e
UWAUH
fD9<Ou
EngagedRebootFourthReminderDialog
CreateSemaphoreExW
Error Originate:PolicyUtil::GetDeadlineDaysForEngagedPolicy:2966
ActiveHoursRebootImminentDialog
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4556
Error Originate:UpdateUtil::GetUpdatePayloadInfo:696
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1061
Error Originate:InteractiveToast::BuildLowDiskToastPayload:1289
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1663
Unexpected : Showing reboot failed dialog but Last reboot scheduled time was not found in session; defaulting to current time.
Toast_UpdateFailed
Error Originate:InteractiveToast::PostToast:512
A_A^A\_^][
RebootUxStateString
_o__purecall
FeatureUpdate
$0< u;3
CreateXmlReader
L$ H9L$(
L$HE3
Ready to reboot start
Error Originate:UpdateUtil::GetUpdatePayloadInfo:617
Warning:UXElementStore::ExtractCurrentScenario:654
Error Originate:InteractiveToast::PostToast:354
Fix Issues
Warning:UXElementStore::GetXmlFilePath:1059
CD$XL
Notification callback occurred from a Toast
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1440
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2087
@USVWATAVH
rebootOutsideOfActiveHours
H!\$ E3
0A_A^A]A\_^[
VWAVH
Error Originate:PolicyUtil::GetTransitionDaysForEngagedPolicy:2878
X_^[]
;l$@@
System\Versions
L$xH3
Error Originate:wWinMain:131
Error Originate:UXElementStore::GetUserLocale:893
o\$PH
Error Originate:InteractiveToast::BuildSnoozeToastPayload:737
SLS\Programs
Microsoft Corporation
LoadLibraryExW
memcmp
toastToDialogReminderInHours
Error Originate:UXElementStore::Initialize:185
Error Originate:UXElementStore::GetXmlFilePath:1130
Troubleshooting
Warning:UXElementStore::ExtractCurrentScenario:665
ForcedReboot
D90v9H
UXActiveHoursStart
RestartInHour
USVWATAUAVAWH
ScheduledRebootFailed
CD$Xf
Change Fair Warning Settings
@SUVWAVH
x|8\$0tvL
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2285
ms-settings:windowsupdate-restartoptions
_initterm
Device is: Entering Ultimate Forced state because Auto accept notification is already shown in forced mode
L9k@t
Error Originate:wWinMain:95
.idata$5
USO_Network
ActiveHoursEnd
isNonFeatureUpdatePending
Error Originate:InteractiveToast::InvokeUsoScheduleReboot:2549
h UAVAWH
L$ I+
Windows.Foundation.Uri
.pdata
internal\sdk\inc\wil\Resource.h
StoreAppProperties
Microsoft
l$ VWATH
NtQueryWnfStateData
Error Originate:UpdateUtil::GetDaysSinceRebootRequired:2504
Error Originate:InteractiveToast::BuildRebootDialogPayload:4073
.didat$2
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2221
Error Originate:UpdateUtil::GetRestartRequiredUpdateIdentifiers:2689
SystemVersions
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4628
t#E9V0t
H+L$(H
Direct To Engaged not specified through OneSettings, defaulting to enabled for this ring
.data$r$brc
_o__initialize_wide_environment
@SUVWAVAW
Error Originate:MusUxRebootHelper::RebootWithUx:245
UpdateGroup
One settings: autoEnterToForcedModeInHours
WindowsUpdatePolicies
SetEvent
Dialog_EnhancedEngagedAcceptAuto
_o__configthreadlocale
H_^][
Warning:UXElementStore::ExtractValues:538
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4351
No updates requiring reboot found for the dialog to be displayed telemetry events.
0A^_^
onecore\enduser\windowsupdate\muse\ux\musnotificationux\lib\interactivetoast.cpp
Failed to read registry value HKLM\%ws\%ws[%ws]
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedReminderDialog:2041
_o_wcstol
Next reboot time computed using Smart Scheduler
Reboot reminder toast
FlightingRing
Error Originate:ActiveHoursUtil::GetNextRebootTime:406
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4420
Error Originate:UXElementStore::Initialize:234
fD9d}
USOShared
Error Originate:MusUxStateAction::DisplayMusUxState:599
wuDeviceid
%hs!%p:
Error Originate:InteractiveToast::LaunchSettingsToScheduleReboot:2478
K SVWH
Software\Policies\Microsoft\Windows\WindowsUpdate
_o___p__commode
NotificationUxState
One settings: dialogToAcceptAutoReminderInHours
0A_A^A\_^
Error Originate:MusUxStateAction::LaunchEnhancedEngagedRebootReminderDialog:3746
Initializing tracing
NotificationUX took too long to launch, cancelling the toast.
CoCreateFreeThreadedMarshaler
Dialog_CantDownloadUpdate
Error Originate:PolicyUtil::GetMgmtUpdatePolicy:2262
OthersRestartAnyway
p WAVAWH
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4639
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4593
EnhancedEngagedRebootAcceptAutoDialog
Allow scheduling reboot failed dialog
Error Originate:MusToastNotification::PostToastNotification:213
Error Originate:InteractiveToast::BuildSnoozeToastPayload:785
Error Originate:LoggingUtil::LogRebootScheduledTelemetryEvent:108
Error Originate:InteractiveToast::BuildRebootDialogPayload:4052
ReasonsNotToReboot
Error Originate:UXElementStore::Initialize:180
CoCreateInstance
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Update\TargetingInfo\DynamicInstalled
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4658
Error Originate:MusUxStateAction::LaunchRebootPostponeMgmtDialog:2427
GetCommandLineW
Error Originate:MusUxStateAction::DisplayMusUxState:655
Error Originate:InteractiveToast::BuildRebootDialogPayload:4107
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingRebootFailedDialog:3178
Dialog_EnhancedEngagedRebootImminent
Error Originate:UpdateUtil::IsFeatureUpdatePending:1594
GetFileAttributesW
Allow scheduling forced reminder dialog
Error Originate:UpdateUtil::GetETag:2806
%s_Temp.*.etl
transitionInDays
Error Originate:MusUxStateAction::LaunchRebootWarningDialog:1536
api-ms-win-crt-string-l1-1-0.dll
WilStaging_02
CompareFileTime
One settings: IsSystemNeededReasonIgnoredInAutoMode
Error Originate:wWinMain:265
.rdata$r
f9,Ku
9\$0|H
Error Originate:MusUxStateAction::LaunchRebootActiveHoursImminentDialog:1927
Error Originate:MusToastNotification::PostToastNotification:189
Error Originate:UXElementStore::GetFilePath:990
HL$xH
L+D$
Invalid argument so using default values for Enhanced engaged reboot experience
.CRT$XIA
OthersPickTime
RtlNtStatusToDosError
u6D9!veH
api-ms-win-core-rtlsupport-l1-1-0.dll
Error Originate:InteractiveToast::DisplayDialog:3605
xPL9m
9h(twH
x*D8e
|$89|$0|
Enhanced engaged reboot reminder toast
D9(v5H
Error Originate:UXElementStore::GetXmlFilePath:1064
Error Originate:ActiveHoursUtil::GetNextRebootTime:471
ResetEvent
x UAVAWH
Error Originate:InteractiveToast::LaunchSettingsToScheduleReboot:2451
dialogToAcceptAutoReminderInHours
@A__]
_o__invalid_parameter_noinfo_noreturn
CallNtPowerInformation
FileDescription
Compat issue toast
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1691
\$ UVWH
activeHoursApplicable
fD9|$@u
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
isForcedModeEnabled
Device is in: Ultimate forced state
Error Originate:UXElementStore::CheckIfScenarioApplicable:422
Data\MetaData
\$ VWAVH
ET$`D
UpgradeType
UWATAVAWH
RebootTime
Error Originate:UXElementStore::ExtractValues:538
T$4H;T$hw
Dialog_RebootActiveHoursUserSelected
Toast_FairWarningPolicyNotifyDeadline
RtlSubscribeWnfStateChangeNotification
Error Originate:MusUxStateAction::DisplayMusUxStateOnWCOS:789
Restart as planned
Warning:UXElementStore::GetStringValue:759
ED$`H
yED97
Auto reboot limit passed in hours:
ntdll.dll
Error Originate:MusUxStateAction::LaunchRebootEngagedFourthReminderDialog:3251
WinVerifyTrust
t'D9)v"
Engaged Auto Reboot Mode
Start time is not in the active hours range
Campaign Applicable
Dialog_AllowSchedulingThirdReminder
Ready to reboot ghost toast
.?AV_com_error@@
PathAllocCanonicalize
CD$Xf9\H
H SVWH
Error Originate:MusUxStateAction::LaunchRebootWarningDialog:1545
UVWATAWH
Error Originate:UXElementStore::ExtractValues:505
AdjustTokenPrivileges
Last reboot marked time read
%systemroot%\system32\Snooze_80.png
Notification minutes to show
CoWaitForMultipleHandles
10.0.17763.292 (WinBuild.160101.0800)
Restart reason is not in one of pre-defined reasons so falling back on general reason.
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedWarningDialog:2202
Option30Minutes
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:994
D$(E3
~0uUH
ms-settings:windowsupdate
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="subHeader" hint-maxLines="2">%3</text><group><subgroup hint-weight="8" hint-textStacking="center"><text>%9</text></subgroup></group></binding></visual><actions><input id="restartFailedOption" type="selection" title="%10" defaultInput="RestartInHour"><selection id="RestartIn30Min" content="%11"/><selection id="RestartInHour" content="%12"/><selection id="RestartIn2Hours" content="%13"/></input><action imageUri="%14" activationType="foreground" arguments="DeferRestartNow" content="%7"/><action imageUri="%15" activationType="background" arguments="RestartFailedRetry" hint-inputId="restartFailedOption" content="%5"/></actions></toast>
fA9,Qu
D;@ s
JfD;7tDL
message
Error Originate:InteractiveToast::BuildNotifyDialogPayload:3859
originatingContextName
WUCurrentVersion
0A_A^_^]
Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingThirdReminderDialog:2918
H9C s4H
L$(E3
.rdata$zETW9
api-ms-win-core-delayload-l1-1-0.dll
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="2">%2</text><text id="2" hint-style="subheader" hint-maxLines="2">%3</text></binding></visual><actions><action imageUri="%6" activationType="foreground" arguments="OthersRestartAnyway" content="%4"/><action imageUri="%7" activationType="foreground" arguments="OthersPickTime" content="%5"/></actions></toast>
Error Originate:UpdateUtil::IsFeatureUpdatePending:1585
UVWAVAWH
L$0E3
L$8H3
Error Originate:InteractiveToast::BuildRebootDialogPayload:4154
<element resid="updateScnDialogTop" layout="borderlayout()" accessible="true" accrole="pane">
D!E#H
A_A^A\_]
9T$`u
acceptAutoToEnterAutoInHours
UXRebootStateForActiveHours
scenario="systemDialog"
Toast_PersistentReadyToReboot
Error Originate:MusToastNotification::PostToastNotification:222
InitiateShutdownW
GetDefaultConfiguration
Error Originate:ActiveHoursUtil::GetNextRebootTime:456
%systemroot%\system32\RestartNowPower_80.png
Error Originate:UXElementStore::Initialize:143
RoOriginateError
Error Originate:MusUxStateAction::LaunchRebootForcedDTUDialog:1710
TerminateProcess
DL$XL
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:970
=97v9H
f9,Au
fD;t$4
Reboot schedule time in days is set
DeviceUpdate
UIXProductFeatures
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedWarningDialog:2191
_o__seh_filter_exe
UpdateOrchestratorSharedRoot
IsEnhancedEngagedReboot
U'H!}
UX reboot State:
Error Originate:MusToastNotification::PostToastNotification:153
Broadcasting WM_QUERYENDSESSION timed out.
D9(vBH
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1545
Notification Activation took more than 10 seconds, exiting process
Error Originate:InteractiveToast::CreateUpdateResultsTaskSchedule:3284
Engaged reboot failed toast
Info Message
ext-ms-win-session-winsta-l1-1-1
Device is in: User Accept auto state
@A_A^A]A\_^[
Software\Microsoft\WindowsUpdate\Orchestrator
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="2">%2</text><text id="2" hint-style="subheader" hint-maxLines="3">%3</text></binding></visual><actions><action activationType="foreground" arguments="NotifyRestartNow" content="%4"/><action activationType="foreground" arguments="%5" content="%6"/></actions></toast>
.CRT$XPZ
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4605
Error Originate:ActiveHoursUtil::GetNextRebootTime:414
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4527
fF94Bu
</element>
RebootReminderToastDisplayed
ExitCode
.text$x
FairWarningLastDismissTimestamp
N(D8>tR
ImmRestartNow
T$ E3
Error Originate:MusUxStateAction::LaunchRebootImminentDialog:1427
api-ms-win-core-processenvironment-l1-1-0.dll
t fD;?t
Error Originate:MusUxStateAction::LaunchEnhancedEngagedRebootReminderDialog:3756
LastToastAction
.xdata$x
L$HH3
Toast_RebootReminder
A^_^
GetModuleHandleW
Error Originate:MusToastNotification::PostToastNotification:163
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4538
D$PI;
Download
Error Originate:InteractiveToast::BuildRebootPolicyEnabledDialogPayload:4269
api-ms-win-core-registry-l1-1-0.dll
HashDigestLength
L$ E3
Reboot and commit failed
WaitAnHour
System\Setup
style
_o__register_onexit_function
Warning:UXElementStore::GetImageFilePath:1243
.giats
kernelbase.dll
Toast_InstallBlocked
.rsrc
One settings: intermediateAutoToUltimateAutoInHours
Enhanced engaged reboot failed dialog
SystemTimeToFileTime
%systemroot%\system32\DesktopKeepOnToastImg.gif
One settings: secondReminderCadenceInHours
fD9<Fu
Error Originate:InteractiveToast::LaunchSettingsToScheduleReboot:2467
Error Originate:InteractiveToast::DisplayDialog:3548
One settings: rebootImminentToAutoFailedInHours
api-ms-win-core-winrt-error-l1-1-0.dll
Error Originate:MusUxStateAction::LaunchNotificationDialog:1307
Software\Microsoft\WindowsUpdate
Dialog_CantInstallUpdate
0A_A^_
SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Settings\Network
OriginalFilename
v?!\$\H
Error Originate:MusUxStateAction::LaunchNotificationDialog:1318
t,D9)v'
BCryptCreateHash
Restart in 2 hours
Notify to Install toast
api-ms-win-core-interlocked-l1-1-0.dll
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingRebootFailedDialog:3134
FileTimeToSystemTime
Install need EULA toast
-Embedding
DeferRestartNow
Error Propagate:InteractiveToast::ScheduleInteractiveReboot
DTU dialog
Error Originate:InteractiveToast::BuildPowerRelatedToastPayload:1860
Toast_EngagedThirdReminder
Error Originate:UXElementStore::GetXmlFilePath:1162
RebootConfirmedByUser
Dialog_EnhancedEngagedRebootFailed
\$8E3
L$09L$<
u699vjH
x ATH
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedWarningDialog:2179
<toast %1 launch="RemPickTime"><visual><binding template="ToastGeneric"><image placement="hero" src="%14"/><text id="1" hint-style="header" hint-maxLines="1">%3</text><text id="3" hint-style="subheader" hint-maxLines="4">%2</text></binding></visual><actions><input id="snoozeTime" type="selection" title="%8" defaultInput="OptionTonight"><selection id="OptionTonight" content="%10"/><selection id="OptionTomorrow" content="%11"/><selection id="Option3Days" content="%12"/></input><action imageUri="%16" activationType="background" arguments="SnoozeUx" hint-inputId="snoozeTime" content="%9"/><action imageUri="%15" activationType="foreground" arguments="RemRestartNow" content="%7"/><action imageUri="%17" activationType="foreground" arguments="RemPickTime" content="%5"/></actions></toast>
Error Originate:InteractiveToast::BuildNotifyUpdatesToastPayload:1797
Toast_EngagedFirstReminder
Restart in 1 hour
Software\Microsoft\WindowsUpdate\UX
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4584
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1494
UVWATAUAVAWH
NtUpdateWnfStateData
Error Originate:SettingUtil::GetDefaultRebootUxStateEx:1285
D9(v9H
Software\Microsoft\Windows\CurrentVersion\WindowsUpdate
CloseHandle
L$8E3
.?AVexception@std@@
@.reloc
bad array new length
fD;>t
xtD8d$4tmA
RebootOutsideOfActiveHours
One settings: intermediateAutoIgnorableReasons
Dialog_InstallNeedEula
Direct To Engaged not specified through OneSettings, defaulting to disabled for this ring
ForcedRemRestartNow
t$pH;
EngagedRebootUserScheduledRebootDialog
Error Propagate:InteractiveToast::SnoozeReboot
GetSystemTimeAsFileTime
failureCount
Error Originate:InteractiveToast::DisplayDialog:3518
@SVWATAVH
Install need user agreement dialog
Toast_EngagedRebootWarning
A__^[]
SeShutdownPrivilege
ControlTraceW
Setup
D$H97vFH
%s\%s_Temp.%%d.etl
Enhanced Engaged user response: Ok on forced warning dialog
UsoEnableEngagedRebootExperience
L$8H!^0H!^8H!^@I
h_^][
Error Originate:MusUxStateAction::LaunchNotificationDialog:1286
Error Originate:MusUxStateAction::LaunchRebootActiveHoursUserSelectedDialog:1835
%systemroot%\system32\LaptopPlugInToastImg.gif
dismiss
)|$`L
D9d$XutH
gfffffffH+
Checking if device is in auto reboot limit
PostNotification call to invoke toast failed
SetUnhandledExceptionFilter
Error Originate:UXElementStore::CheckIfScenarioApplicable:404
Reboot Ux State reason is out of range
wcscmp
Call to invoke dialog failed
H9P A
Error getting the value of reboot failed session variable. Setting to false.
.?AVtype_info@@
D$ E3
.text
D91tp
Dialog_RebootActiveHoursForcedReminder
9|$@@
Error Originate:MusUxStateAction::LaunchRebootDTUDialog:1648
Failure to check the last toast action posted. Can't prioritize a toast that doesn't exist already in NotificationCenter.
Enhanced Engaged Reboot Mode
DMCmnUtils.dll
One settings: isUltimateForcedModeEnabled
Auto Update\LastOnlineScanTimeForAppCategory
.rdata$brc
Error Originate:UXElementStore::GetXmlFilePath:1135
@USVWATAUAVH
Unexpected : Showing reboot failed dialog but last attempted reboot time is not found in session, attempting to use last scheduled reboot time instead
Ready to reboot toast
originatingContextId
DTURebootDialog
IsConvergedUpdateStackEnabled
Notify to Download toast
L$`E3
IsSystemNeededReasonIgnoredInAutoMode
pA^_^
Warning:UnpSurfaceHelper::GetCampaignGuidCSV:84
Download need more space toast
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1145
%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X
Error Originate:InteractiveToast::SnoozeReboot:3090
UpdateRevision
WUTraceLogging
LocalAlloc
rebootUsingSmartScheduler
Enhanced engaged reboot imminent dialog
Engaged first reminder toast
MusUxState
.idata$4
H;T$hw
ext-ms-win-session-usertoken-l1-1-0
DTURebootForcedDialog
A_A^A]A\^[]
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1557
L9d$huM
GetTokenInformation
_o___stdio_common_vswprintf
D9(v:H
Error Originate:UXElementStore::ExtractCurrentScenario:654
revisionNumber
8a27f2ca-9fcd-4181-9520-7fa56b86b178
trayicon
_o__cexit
Warning:UXElementStore::GetXmlFilePath:1053
H;K@H
Toast_EnhancedEngagedRebootReminder
api-ms-win-core-com-l1-1-0.dll
Direct To Engaged Enabled through OneSettings
Error Originate:InteractiveToast::GetScheduledRebootTime:2362
A_A\_^]
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="subtitle">%2</text><text id="2" hint-style="captionSubtitle">%3</text><group><subgroup hint-weight="8" hint-textStacking="center"><text>%7</text></subgroup></group></binding></visual><actions><input id="restartOption" type="selection" title="%13" defaultInput="OptionAsPlanned"><selection id="OptionAsPlanned" content="%14"/><selection id="Option30Minutes" content="%15"/><selection id="Option1Hour" content="%16"/></input><action imageUri="%10" activationType="foreground" arguments="WarnRestartNow" content="%8"/><action imageUri="%12" activationType="foreground" arguments="WarnPickTime" content="%6"/><action imageUri="%11" activationType="background" arguments="RestartWarningOption" hint-inputId="restartOption" content="%5"/></actions></toast>
u=D9!
Smart active hours set through OneSettings
__C_specific_handler
Low Disk Toast is invoked
Toast_CompatIssue
One settings: forcedToUltimateForcedModeInHours
t$P9\$0
snoozeTime
98v9H
std::exception: %hs
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:1998
Dialog_DownloadAvailable
Toast_FairWarningLaptop
Error Originate:UpdateUtil::GetRebootScheduleMaxValidDays:1089
Canary
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2061
@USWATAUAWH
Error Originate:MusToastNotification::PostToastNotification:146
CreateEventW
Fair warning blocking apps limit read from OneSettings:
|$ AVH
SusClientId
bad allocation
QueryTraceW
d$\fD
Error Originate:InteractiveToast::BuildRebootDialogPayload:4061
Error Originate:InteractiveToast::GetScheduledRebootTime:2374
Reboot other users toast
t$ WH
.text$mn$00
Error Originate:LoggingUtil::LogRebootScheduledTelemetryEvent:120
SetLastError
.rsrc$01
CallContext:[%hs]
DebugBreak
Logon update results task created
PowerSettingUnregisterNotification
VelocityFeatureOn
ShellChromeAPI.dll
SmartActiveHoursOn
A_A^A]A\_^[]
D$pE3
Error Originate:MusToastNotification::BuildToastPayload:379
Error Originate:MusUxStateAction::LaunchRebootEngagedFourthReminderDialog:3270
Error Originate:UXElementStore::Initialize:136
$9|$0}1I
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1531
ntelD
Start time is in the active hours range
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2028
tAD93
Error Originate:MusToastNotification::PostToastNotification:129
_o__invalid_parameter_noinfo
InitializeSListHead
Error in launching settings update restart options page
_CxxThrowException
D$xfD
Active hours forced reminder dialog
RebootUxState
Invalid notificaiton ux state
Error getting session variable: AutoAcceptShownToUser. Setting default as false.
FeaturePayload
Dialog_AllowSchedulingFirstReminder
LeaveCriticalSection
_o__set_fmode
%s\%s.%03d.etl
DEPRECATED Enhanced engaged second reminder dialog
Error Originate:UXElementStore::GetXmlFilePath:1142
Low uptime toast
Shell_RequestShutdown
Error Originate:SettingUtil::GetEnhancedEngagedRebootUxState:1425
Microsoft Corporation. All rights reserved.
Error Originate:MusUxStateAction::GetLastRebootAttemptTime:2572
MusNotificationUx.pdb
callContext
L$PH3
Enhanced Engaged user response: Snooze on second reminder
=8\$0t3L
Enhanced Engaged user response: Wait an Hour option on reboot imminent dialog
H+T$
.text$yd
One settings: ultimateAutoIgnorableReasons
SetEndOfFile
autoEnterToForcedModeInHours
fF9$Wu
Argument
CreateDirectoryW
Restart as planned.
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingRebootFailedDialog:3157
onecore\enduser\windowsupdate\muse\ux\utilities\settingutil.cpp
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1181
api-ms-win-core-localization-l1-2-0.dll
D$xH;
Error Originate:UpdateUtil::GetRebootRequiredTimestamp:2385
Toast_FailedDiskSpaceCheck
RebootScheduledBySmartScheduler
Error Originate:UpdateUtil::GetRestartRequiredUpdateIdentifiers:2634
RebootImminentToast
@USVWAUAVAWH
Error Originate:MusUxStateAction::LaunchRebootEngagedFourthReminderDialog:3281
Reporting
Error Originate:MusUxStateAction::LaunchRebootWarningDialog:1566
api-ms-win-core-winrt-l1-1-0.dll
GetSmartBusyCheckVelocityFeature
Wait for broadcasting message returned
%systemroot%\system32\ScheduleTime_80.png
Device is in: Ultimate auto state
DefaultSnoozeNoactionNeeded
Error Originate:UpdateUtil::GetRebootRequiredTimestamp:2412
UpdateModalDialogLaunched
Error Originate:UXElementStore::GetImageFilePath:1249
Error Originate:UpdateUtil::IsNonFeatureUpdatePending:1681
Error Originate:UXElementStore::GetXmlFilePath:1053
D$8fD;
Error Originate:MusUxStateAction::DisplayMusUxState:541
AcquireSRWLockExclusive
.imrsiv
UpdatePolicy\PolicyState
UsoDataMigration
api-ms-win-crt-private-l1-1-0.dll
Error Originate:UpdateUtil::IsNonFeatureUpdatePending:1693
`A_A^A]A\_^]
l$ E3
Days limit
Error Originate:MusUxStateAction::LaunchRebootActiveHoursUserSelectedDialog:1816
NotificationUxStateString
UsoACPowerCheckBeforeRestart
fD9<Qu
LegalCopyright
Warning:UXElementStore::Initialize:223
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1476
function
Error Originate:InteractiveToast::BuildNotifyDialogPayload:3883
GetSystemTime
Allow scheduling third reminder dialog
Device is in: Engaged mode
HL$pH
EnhancedEngagedRebootForcedPrecursorDialog
Error Originate:MusUxStateAction::GetMgmtUpdatePolicy:2652
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:982
Software\Microsoft\WindowsUpdate\Orchestrator\Configurations
Error Originate:MusUxStateAction::GetScheduledRebootTime:2517
Error Originate:MusUxStateAction::LaunchRebootPolicyDeadlineEnabledForcedWarningDialog:2299
Dialog_RebootImminent
UNP\UpdateNotificationHelpers.dll
Error Originate:InteractiveToast::SnoozeReboot:3069
dialogs
8\$1t
Error Originate:UpdateUtil::GetRebootScheduleMaxValidDays:1038
_o___std_exception_copy
L$0H3
[ UVWH
One settings: skipToAcceptAutoReminderInHours
FairWarningChangeSettings
w+H9A
_o__configure_wide_argv
\$ HcD$$Hc
View Settings
Error Originate:UpdateUtil::GetUpdatePayloadInfo:596
.rdata$zzzdbg
Low uptime dialog
api-ms-win-core-path-l1-1-0.dll
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingFirstReminderDialog:2705
onecore\enduser\windowsupdate\muse\ux\utilities\uxstatemanager.cpp
ext-ms-win-shell-shell32-l1-2-1
LoadStringW
Error Originate:InteractiveToast::InvokeRestartNow:3370
WAVAWH
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2135
)|$`H
Error Originate:LoggingUtil::LogRebootScheduledTelemetryEvent:101
.rdata
Error Originate:SettingUtil::GetEngagedRestartPolicy:1692
Toast_DownloadNeedWifi
api-ms-win-core-errorhandling-l1-1-0.dll
EngagedRestartTransitionDays is set
|$0H;
Error Originate:InteractiveToast::BuildSnoozeToastPayload:682
SHFormatDateTimeW
UpdateStore
Metered connection toast
EnhancedEngagedRebootRebootImminentDialog
BCryptFinishHash
RebootWarningToast
Error Originate:InteractiveToast::SnoozeReboot:3080
EnhancedEngagedRebootRebootFailedDialog
value
Error Originate:MusUxStateAction::LaunchRebootEngagedFourthReminderDialog:3260
Error Originate:MusUxStateAction::DisplayDialog:926
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4387
Auto Update\Power
Error Originate:InteractiveToast::BuildLowDiskToastPayload:1317
Error Originate:RebootTimeUtility::GetLastRebootMarkedTime:114
WaitForSingleObject
EngagedModeLimit
\$8I;
DialogType
<toast %1><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="body" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="protocol" arguments="%4" content="%5"/></actions></toast>
L$ UVWATAUAVAWH
OpenProcessToken
Toast_DownloadViaCellularNeedUserAgreement
Error Originate:LoggingUtil::LogRebootScheduledTelemetryEvent:127
IsForcedEnabled
Error Originate:UXElementStore::Initialize:223
GetModuleFileNameA
u#D9A s
Error Originate:InteractiveToast::BuildNotifyDialogPayload:3899
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1117
AcceptAutoModeLimit
StartTraceW
_o__set_app_type
SVWATAUAVAWH
_register_thread_local_exe_atexit_callback
api-ms-win-core-sysinfo-l1-1-0.dll
DUShared
ext-ms-win-session-winsta-l1-1-2
SHGetKnownFolderPath
string
ToastNotificationResponseReceived
Setting ActiveHours end hour limit
Dialog_LowUptime
memcpy
.idata$3
Error Originate:InteractiveToast::PostToast:454
Toast_RebootOtherUsers
Dialog_EnhancedEngagedForcedPrecursor
Error Originate:InteractiveToast::BuildSnoozeToastPayload:696
.didat$5
Reboot pending time
Error Originate:ActiveHoursUtil::StoreActiveHourStates:1025
RtlDllShutdownInProgress
Error Originate:MusUxStateAction::LaunchRebootForcedDTUDialog:1720
Error Originate:UpdateUtil::GetUpdatePayloadInfo:668
Error Originate:MusUxStateAction::LaunchRebootImminentDialog:1418
Error Originate:MusUxStateAction::LaunchRebootPostponeMgmtDialog:2408
Device is in: Intermediate auto state
A^A\_^[]
Failed to retrieve updates for the dialog to be displayed telemetry events.
Error Originate:wWinMain:64
string too long
Error Originate:ActiveHoursUtil::GetNextRebootTime:578
T$0t`
t"H9}
Allow scheduling second reminder dialog
T$`fD
api-ms-win-core-shutdown-l1-1-1.dll
ExpandEnvironmentStringsW
Fair Warning Reboot Notification Desktop
Error Originate:MusUxStateAction::LaunchRebootImminentDialog:1449
UsoIgnoreActiveUserBeforeRestart
Error Originate:MusUxStateAction::DisplayDialog:1196
Warning:UnpSurfaceHelper::GetCampaignGuidCSV:119
GetPersistedRegistryLocationW
Dialog_InstallNeedUserAgreement
Error Originate:UpdateUtil::GetETag:2824
Enhanced Engaged Ultimate Auto Reboot Mode
(_^][
UATAUAVAWH
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4617
USOCore.dll
DaysSinceRebootRequired
HeapFree
UWATAUAVH
Error Originate:MusUxStateAction::SendNotificationToBeDisplayedEvent:3487
currentContextId
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="subtitle">%2</text><text id="2" hint-style="captionSubtitle">%3</text><group><subgroup hint-align="center" hint-weight="6"><text>%7</text></subgroup></group></binding></visual><actions><action imageUri="%10" activationType="foreground" arguments="WarnRestartNow" content="%8"/><action imageUri="%12" activationType="foreground" arguments="WarnPickTime" content="%6"/><action imageUri="%11" activationType="system" arguments="dismiss" content="%5"/></actions></toast>
MusUxState is not supported on WCOS:
GetTickCount
Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\DTU
Error Originate:InteractiveToast::BuildSnoozeToastPayload:749
ClearActiveNotifications
Failed to write registry value HKLM\%ws\%ws[%ws]
fA96u
fE9$@u
restartOption
Scenario requested is not known.
Restart Later
AutoAcceptShownToUser
Trace
Engaged third reminder toast
L$@H3
PostMessageW
UpdateOrchestratorCurrentVersionRoot
Reboot time calculated using countdownMinutes:
Error Originate:UpdateUtil::GetUpdatePayloadInfo:589
Direct To Engaged not specified through OneSettings and Unable to identify Flighting ring, defaulting to enabled
t$HH!\$0L
9Empty element
Enhanced Engaged user response: Wait an Hour option on reboot failed dialog
Error Originate:MusUxStateAction::LaunchRebootPolicyDeadlineEnabledForcedWarningDialog:2322
Error in launching multi user reboot toast
Auto Update
Error Originate:UXElementStore::Initialize:150
UWAVH
A_A^A\
Windows.System.Launcher
@VWAVH
EventSetInformation
tSD9(
TempLogs
Error Originate:UpdateUtil::GetRebootScheduleMaxValidDays:1066
Error Originate:InteractiveToast::BuildRebootDialogPayload:4040
ResponseFromNotificationUx
_c_exit
Device is: Entering EnterAuto state because Auto accept notification is already shown in engaged mode
OutputDebugStringW
Warning:UnpSurfaceHelper::GetCampaignGuidCSV:110
D9 v<H
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1635
@SVWAVAWH
H!t$(I
Data migration failed dialog
ReturnHr
Error Originate:UpdateUtil::GetUpdatePayloadInfo:575
Error Originate:UXElementStore::ExtractValues:487
Scheduled update failed dialog
_o__set_new_mode
Error Originate:UXElementStore::GetFilePath:985
ImmAnotherTime
WINTRUST.dll
Error Originate:MusUxStateAction::LaunchRebootPolicyDeadlineEnabledForcedWarningDialog:2285
L$0@2
UsoScanType
SkipToAutoModeLimit
Software\Microsoft\WindowsUpdate\Orchestrator\USOShared
Error Originate:InteractiveToast::DisplayToast:304
Error Originate:ActiveHoursUtil::GetNextRebootTime:540
Error Originate:UXElementStore::ExtractCurrentScenario:665
</duixml>
.CRT$XTA
Error Originate:ActiveHoursUtil::GetNextRebootTime:514
\$HH;
RemRestartNow
T$PL;
RebootVersion
Device is: Entering EnterAuto state because Auto accept notification is already shown in auto mode
@8,1u
UserDoesNotHaveRebootPrivilegeNotDisplayingNotifications
Error Originate:UpdateUtil::GetUpdatePayloadInfo:582
Enhanced Engaged user response: Ok on reboot imminent dialog
@SUVWATAVAWH
Wait result
WATAUAVAWH
Reboot warning dialog
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4440
A^_^[]
Enhanced Engaged User Accept Auto Reboot Mode
fD9t]
Error Originate:InteractiveToast::BuildRebootDialogPayload:4085
ext-ms-win-session-winsta-l1-1-0
Reporting\DontExpirePolledEvents
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="subHeader" hint-maxLines="2">%3</text><group><subgroup hint-weight="8" hint-textStacking="center"><text>%9</text></subgroup></group></binding></visual><actions><action activationType="foreground" arguments="DeferRestartNow" content="%7"/><action activationType="background" arguments="DeferRestartInHour" content="%5"/></actions></toast>
api-ms-win-security-base-l1-1-0.dll
A_A^A]A\_
|$ E3
.CRT$XCAA
Toast_RebootActiveHoursForcedReminder
Toast_MeteredConnection
WTHelperGetProvSignerFromChain
ReleaseSRWLockShared
\$ UH
Campaign name
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4375
Interactive Toast: Toast template not found
.CRT$XTZ
97vuH
Notification ux is launched
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1509
Error Originate:InteractiveToast::BuildLowDiskToastPayload:1277
EnterAutoModeLimit
RtlGetDeviceFamilyInfoEnum
Error Originate:InteractiveToast::BuildPowerRelatedToastPayload:1898
CreateThread
L9{0t#H
xHD9e
.00cfg
#pragma once
Error Originate:InteractiveToast::PostToast:500
FreeLibrary
Registry key value is set: Upgrade found in the applicable updates
Using previously persisted global update reboot time to enforce reboot.
@SUVWH
Error
A_A^A]_[
One settings: autoEnterToIntermediateAutoInHours
gfffffffI
FailFast
internal\sdk\inc\wil\staging.h
GetNextAcceptableTimeEx
A_A]A\_[]
T$0E3
Setting default values
DeviceLocalTime
UVWATAVH
OpenThreadToken
%systemroot%\system32\OkDone_80.png
ATAVAWH
CompanyName
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedReminderDialog:2085
Upgrade found in the applicable updates
Oldest Reboot Time is in the future; Failing to get OldestRebootTime.
GetCurrentThreadId
@A_A^_
}0H+}(H
IsUltimateForcedEnabled
WaitForThreadpoolTimerCallbacks
Auto Update\RebootRequired\Mandatory
UpdateToastLaunched
Warning:UXElementStore::Initialize:218
Error Originate:InteractiveToast::BuildRebootDialogPayload:4121
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingSecondReminderDialog:2845
Enhanced Engaged user response: Ok on forced precursor dialog
autoEnterToIntermediateAutoInHours
Active hours user selected dialog
Warning:UXElementStore::ExtractValues:487
CoRegisterClassObject
ActiveHoursScenario
Error Originate:MusUxStateAction::LaunchRebootDTUDialog:1638
_o__exit
GetProcessHeap
D8$8u
Sleep
Allow scheduling warning dialog
fE;8t
StickyUpdates
testHookName
Software\Microsoft\Windows\CurrentVersion\DeviceUpdate
Error Originate:ActiveHoursUtil::GetNextRebootTime:432
Error Originate:UpdateUtil::GetUpdatePayloadInfo:647
xJ@8u
D$`L;
Error Originate:InteractiveToast::DisplayDialog:3622
u0HcH<H
t$ UWATAVAWH
Download need WIFI toast
Error Originate:SettingUtil::GetEnhancedEngagedRebootUxState:1418
t"D8=.
Enhanced Engaged Enter Auto Reboot Mode
_o__errno
Error Originate:MusUxStateAction::ShowToastRebootReminder:875
RebootScheduleTimeInDays
Error Originate:InteractiveToast::BuildSnoozeToastPayload:710
oT$@f
FilesToCollect
Error Originate:UpdateUtil::GetETag:2817
Error Originate:InteractiveToast::BuildSnoozeToastPayload:821
Error Originate:UpdateUtil::GetDaysSinceRebootRequired:2535
RegOpenKeyExW
ReleaseSemaphore
onecore\enduser\windowsupdate\muse\orchestrator\common\lib\registrymanager.cpp
CreateEventExW
@8|$4
Error Originate:wWinMain:113
restartDeadlineInDays
FindFirstFileW
EncodeBase64W
9|$0|;E
Error Originate:InteractiveToast::DisplayDialogNotification:3799
updateId
EngagedRebootSecondReminderDialog
98v4H
PA_A^A]A\_^]
One settings: isForcedModeEnabled
l$ VWAVH
xJf9u
USVWAVH
Toast_LowUptime
A^_^][
CloseThreadpoolTimer
GetCampaignContentLocation
WUIconClass
Error Originate:UpdateUtil::IsNonFeatureUpdatePending:1672
intermediateAutoIgnorableReasons
Error Originate:SettingUtil::GetEngagedRestartPolicy:1700
L$ SUVWH
Error Originate:UpdateUtil::GetRebootScheduleMaxValidDays:1077
DEPRECATED Enhanced engaged third reminder dialog
AutoToAutoFailedLimit
ResolveDelayLoadedAPI
Error Originate:MusToastNotification::PostToastNotification:139
restartFailedOption
Install blocked toast
isFeatureUpdatePending
Active hours computed using Smart Scheduler
D98v9
Allow scheduling first reminder dialog
?_Xlength_error@std@@YAXPEBD@Z
Error Originate:UXElementStore::Initialize:163
Error Originate:InteractiveToast::PostToast:397
PathCchSkipRoot
Error Originate:InteractiveToast::InvokeRestartNow:3363
_o__initialize_onexit_table
Error Originate:InteractiveToast::BuildRebootDialogPayload:4132
fD9|A
_o_free
Error Originate:MusUxStateAction::DisplayMusUxState:592
campaign
D9 v6H
D$PE3
@USVATAUAVAWH
.didat$7
RebootOtherUsers
OOBE download in progress toast
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2297
l$xfD
Failed to get active hours start from policy value, setting default value
forcedPrecursorToForcedDialogInHours
memmove
Services\Pending\
Dialog_RebootDTU
ErrorCode
(caller: %p)
Error Originate:InteractiveToast::BuildRebootDialogPayload:4022
Error Originate:MusUxStateAction::DisplayDialog:1185
Reboot imminent dialog
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingThirdReminderDialog:2927
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1076
Error Originate:UXElementStore::GetXmlFilePath:1181
.rtc$TAA
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4409
eDTERestartTonight
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedReminderDialog:2064
Dialog_ScheduleUpdateFailed
Dialog_AllowSchedulingRebootFailed
Error Originate:SettingUtil::GetDefaultRebootUxStateEx:1233
Error Originate:InteractiveToast::GetScheduledRebootTime:2386
Software\Microsoft\DTU
ForcedReminderToast
Snooze until tonight
CountdownMinutes
040904B0
.CRT$XIC
Enhanced Engaged Ultimate Reboot Mode
Error Originate:UpdateUtil::IsNonFeatureUpdatePending:1700
.rdata$zETW2
M H1E
@USVWAVH
M;a s?H
FindWindowExW
AcquireSRWLockShared
x[f9T$8
LocalFileTimeToFileTime
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2049
Active hours forced warning dialog
D98vBH
.?AVbad_alloc@std@@
A_A^A]A\_^]
Dialog_AllowSchedulingForcedReminder
.rtc$IZZ
A_A^]
Fair Warning Reboot Notification Laptop
d$PfD
xvD8u
RemPickTime
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2313
Error Originate:InteractiveToast::DisplayDialog:3650
Ux State enum value
Can't prioritize a toast that doesn't exist already in NotificationCenter.
L$4E3
ext-ms-win-shell32-shellfolders-l1-1-0.dll
Error Originate:InteractiveToast::BuildSnoozeToastPayload:809
Enhanced Engaged Forced Reboot Mode
Error Originate:UXElementStore::GetImageFilePath:1243
Error Originate:ActiveHoursUtil::GetDeviceActiveHours:123
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4571
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedReminderDialog:2074
ToastRebootButtonClicked
RestartIn2Hours
InitOnceComplete
@USVWAWH
Registry key value is set
ReadFile
.rtc$IAA
RestartIn30Min
PowerSettingRegisterNotification
RegQueryValueExW
t$(E3
@SVWH
A_A^_^[
VWAUAVAWH
Failed to retrieve updates for the ToastNotificationDisplayed event.
VarFileInfo
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1581
Unexpected arguments passed to interactive toast
Error Originate:ActiveHoursUtil::GetNextRebootTime:446
HRESULT
Error Originate:InteractiveToast::InvokeRestartNow:3431
UpdateTag
Dialog_EnhancedEngagedRebootReminder
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><image placement="hero" src="%2"/><text id="1" hint-style="header" hint-maxLines="2">%3</text><text id="2" hint-style="subheader" hint-maxLines="2">%4</text></binding></visual><actions><action imageUri="%5" activationType="foreground" arguments="RemPickTime" content="%6"/><action imageUri="%7" activationType="foreground" arguments="eDTERestartTonight" content="%8"/><action imageUri="%9" activationType="foreground" arguments="RemRestartNow" content="%10"/></actions></toast>
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:1985
L9d$HuM
_o___stdio_common_vswscanf
TUUUUUU
Dialog_RebootPolicyEnabledForcedWarning
api-ms-win-core-libraryloader-l1-2-0.dll
Error Originate:SettingUtil::GetDefaultRebootUxStateEx:1226
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1569
RtlUnsubscribeWnfNotificationWaitForCompletion
L9Y s
t_H9{
Error Originate:InteractiveToast::PostToast:388
Error Originate:InteractiveToast::InvokeUsoScheduleReboot:2585
d$pfD
Notification Activation not expected for WCOS device, exiting process
CreateFileW
NotificationUx
onecore\enduser\windowsupdate\muse\ux\utilities\flightingutil.cpp
D$T9p
F0D8#ukD8c
onecore\enduser\windowsupdate\muse\ux\musnotificationux\lib\toastnotification.cpp
Local\SM0:%d:%d:%hs
Error Originate:UpdateUtil::GetRebootScheduleMaxValidDays:1053
Charge and Update, Laptop plug in reminder toast
Error Originate:MusUxStateAction::LaunchRebootActiveHoursImminentDialog:1953
RegGetValueW
Unexpected : Showing reboot failed dialog but last attempt is not marked as failed in session
Update successful toast
api-ms-win-core-winrt-string-l1-1-0.dll
FormatMessageW
module
ToastNotificationDisplayed
Dialog_RebootActiveHoursImminent
CT$`L
User Response
Dialog_EnhancedEngagedForcedWarning
Error Originate:UXElementStore::GetUserLocale:882
CoUninitialize
Error Originate:InteractiveToast::ScheduleInteractiveReboot:3211
Error Originate:InteractiveToast::BuildSnoozeToastPayload:761
BCryptOpenAlgorithmProvider
A_A^A]A\_
D$@fD
.rtc$TZZ
A^A\_^[
WindowsUpdateUXRoot
DeleteCriticalSection
<toast %1><visual><binding template="ToastGeneric"><image placement="hero" src="%4"/><text id="1" hint-style="header" hint-maxLines="2">%2</text><text id="2" hint-style="subheader" hint-maxLines="4">%3</text></binding></visual></toast>
ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll
Toast Name
RaiseException
api-ms-win-shcore-obsolete-l1-1-0.dll
\$ WH
EngagedRebootThirdReminderDialog
RtlCaptureContext
No arguments were passed in, activation not successful.
`.imrsiv
H!^(H
Error Originate:MusUxStateAction::DisplayMusUxState:566
PathCchCanonicalize
One settings: acceptAutoToEnterAutoInHours
x)D9e
Error Originate:MusUxStateAction::DisplayMusUxState:532
L9|$p
Deadline from policy is set
x ATAVAWH
gfffffffH
Toast_DesktopKeepOnReminder
api-ms-win-power-base-l1-1-0.dll
Software\Microsoft\UIX\ProductFeatures
Enhanced Engaged user response: Unexpected user response
Error Originate:MusToastNotification::BuildToastPayload:492
Error Originate:wWinMain:173
Charge and Update, Keep alive warning toast
ObjectLength
Error Originate:InteractiveToast::BuildRebootDialogPayload:3997
L;Y L
WTHelperProvDataFromStateData
Toast_NotifyToDownload
A^A]A\_^[]
Error Originate:UpdateUtil::IsNonFeatureUpdatePending:1664
ms-musux:launchsettingsrestart
GetUserPreferredUILanguages
Install need more space toast
T$8H+
A_A^_
f94Qu
Error Originate:UXElementStore::Initialize:218
Reboot is canceled due to blocking apps.
(t$pf
Error Originate:InteractiveToast::DisplayDialog:3505
WriteFile
msvcp_win.dll
Warning:UXElementStore::Initialize:234
<toast launch="%1" activationType="protocol" duration="long"><visual><binding template="ToastGeneric"><text id="1">%2</text><text id="2">%3</text></binding></visual><actions><action activationType="protocol" arguments="%4" content="%5"/><action activationType="protocol" arguments="%6" content="%7"/></actions></toast>
Error Originate:InteractiveToast::BuildRebootPolicyEnabledDialogPayload:4230
Error Originate:MusUxStateAction::DisplayMusUxState:550
Error Originate:UXElementStore::GetXmlFilePath:1114
A_A^A\
Rich.^
UserScheduledRebootDialog
Error Originate:MusUxStateAction::LaunchRebootDTUDialog:1628
Auto Update\RebootRequired
fA9>t
api-ms-win-core-threadpool-l1-2-0.dll
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1030
api-ms-win-core-processthreads-l1-1-0.dll
@USVWATAVAWH
Error Originate:InteractiveToast::PostToast:379
Error Originate:MusToastNotification::BuildToastPayload:364
Error Originate:MusUxStateAction::LaunchEnhancedEngagedRebootReminderDialog:3739
T$(E3
Error Originate:MusUxStateAction::LaunchEnhancedEngagedRebootReminderDialog:3700
<duixml>
USOPrivate
DirectEngagedReboot
10.0.17763.292
Error Originate:InteractiveToast::BuildSnoozeToastPayload:773
_o_terminate
|$ UATAWH
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingFirstReminderDialog:2719
ReleaseSRWLockExclusive
ms-musux:launchscheduleeboot
Snooze
Microsoft.Windows.Update.NotificationUx
Error Originate:UpdateUtil::GetDaysSinceRebootRequired:2518
D97v3H
RtlLookupFunctionEntry
Enhanced engaged accept auto dialog
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingWarningDialog:3056
RestartWarningOption
<RichText id="atom(updateScnDialogContentId)" layoutpos="top" contentalign="wrapleft | noprefix" accessible="true" accrole="statictext" content="" font="gtf(TEXTSTYLE,1,0)"/>
internal\sdk\inc\wil\resource.h
api-ms-win-shlwapi-winrt-storage-l1-1-0.dll
Error Originate:MusUxStateAction::LaunchRebootForcedDTUDialog:1730
Error Originate:InteractiveToast::BuildLowDiskToastPayload:1301
[%hs(%hs)]
Windows.SystemToast.WindowsUpdate.Notification
api-ms-win-core-delayload-l1-1-1.dll
Error Originate:SettingUtil::IsDeviceTimeOutsideRebootBounds:1647
Error Originate:UXElementStore::ExtractCurrentScenario:644
QueryPerformanceCounter
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingFirstReminderDialog:2742
ScheduledRebootTime
effffff
Error Originate:InteractiveToast::ScheduleInteractiveReboot:3222
D;t$D
threadId
@8}wt*A
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2037
D98v7H
Error Originate:MusToastNotification::Display:62
Error Originate:InteractiveToast::InvokeUsoScheduleReboot:2575
\$ UVWATAUAVAWH
StringFileInfo
<toast %1 launch="%2"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="2">%3</text><text id="3" hint-style="subheader" hint-maxLines="4">%4</text></binding></visual><actions><action activationType="foreground" arguments="%5" content="%6"/><action activationType="foreground" arguments="%7" content="%8"/></actions></toast>
oD$ f
Warning:ActiveHoursUtil::GetNextRebootTime:498
0A_A^A]A\_
System dialog based on notification platform is invoked
api-ms-win-core-handle-l1-1-0.dll
BCryptHashData
L9H s
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingSecondReminderDialog:2815
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4398
@WATAUAVAWH
UpdateNotificationLevel Policy is Configured and disable all notifications
Error Originate:UXElementStore::GetXmlFilePath:1120
Update failed start
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingSecondReminderDialog:2824
.text$mn
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingRebootFailedDialog:3167
RegSetKeyValueW
D$XE3
Error Originate:InteractiveToast::LaunchSettingsToScheduleReboot:2437
L$ SH
Warning:LoggingUtil::LogRebootScheduledTelemetryEvent:93
<toast %1><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="body" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="background" arguments="%5" content="%4"/></actions></toast>
EnableTraceEx2
failureId
Device is in: Forced state
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2101
L$XH+
Toast_OOBEDownloadInProgress
Error Originate:wWinMain:105
Error Originate:InteractiveToast::BuildRebootDialogPayload:4009
.?AVbad_array_new_length@std@@
api-ms-win-core-heap-obsolete-l1-1-0.dll
Error Originate:MusUxStateAction::LaunchRebootWarningDialog:1555
<toast launch="%1" activationType="protocol" duration="long"><visual><binding template="ToastGeneric"><text id="1" hint-maxLines="4">%2</text><text id="2">%3</text></binding></visual></toast>
UxState
RebootDeferredReason
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1157
EngagedRestartDealineDays is set
UX state is None so notification is not shown.
Failed to get broadcasting message result
fD9d$h
Error Originate:wWinMain:149
<toast %1><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="subheader" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="protocol" arguments="%4" content="%5"/></actions></toast>
Reboot time is retrieved from update session:
D$0@8|$`t]H
EventWriteTransfer
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1452
t$xI+
oL$0f
rebootImminentToAutoFailedInHours
H!\$8H!\$@H
Active hours imminent toast
Broadcasting WM_QUERYENDSESSION returned
Engaged second reminder toast
L$`H3
D$@E3
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedWarningDialog:2165
D$ fD98t
<toast launch="%1" activationType="protocol" duration="long"><visual><binding template="ToastGeneric"><text id="1" hint-maxLines="2">%2</text><text id="2" hint-maxLines="4">%3</text></binding></visual></toast>
A_A\]
L$ SWH
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1210
Error Originate:UXElementStore::GetXmlFilePath:1176
t)D9!v$
.didat$6
ts9X(u
Forced DTU dialog
Error Originate:InteractiveToast::DisplayDialog:3530
Enhanced Engaged Experience Settings
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1428
RtlRandomEx
EngagedRebootForcedReminderDialog
RebootScheduled
Error Originate:PolicyUtil::GetTransitionDaysIfEngagedPolicyInEffect:3093
Error Originate:MusUxStateAction::LaunchRebootActiveHoursUserSelectedDialog:1846
Error Originate:InteractiveToast::BuildNotifyUpdatesToastPayload:1757
IsDebuggerPresent
scenario="reminder"
CL$xL+
.rdata$zETW1
Error Originate:UpdateUtil::GetUpdatePayloadInfo:624
Update failed toast
A^A\_^]
@A_A^A\
UsoServicingStack
ms-settings:windowsupdate-action
RtlVirtualUnwind
MusErrorTextBlockStyle
_o__crt_atexit
H+D$8H
|$ UH
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1103
yD9;v/H
L$@I+
UpdateRebootTime
pA_A^_^]
RaiseFailFastException
Error Originate:UXElementStore::ExtractValues:533
Error Originate:UpdateUtil::GetRestartRequiredUpdateIdentifiers:2677
api-ms-win-core-processthreads-l1-1-1.dll
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingThirdReminderDialog:2948
A_A^A]_^
Download available dialog
Error Originate:SettingUtil::IsDeviceInAutoRebootLimit:1143
System
fD;8u
FlightPendingCommit
Auto reboot set in hours from pending reboot:
L$@H+L$8H
.CRT$XCA
Warning:UXElementStore::GetXmlFilePath:1181
Warning:UXElementStore::GetXmlFilePath:1162
7t|A+
RoGetActivationFactory
E9V0u
CD$hH
Toast_EngagedRebootFailed
Blocking apps limit read from OneSettings:
A^A]A\_]
Enhanced Engaged user response: Ok on accept auto dialog
Warning:UXElementStore::Initialize:163
Warning:UXElementStore::ExtractCurrentScenario:644
api-ms-win-eventing-legacy-l1-1-0.dll
SetThreadpoolTimer
Error Originate:InteractiveToast::ScheduleInteractiveReboot:3233
fD90t,
Engaged reboot warning toast
Fair Warning Dismiss
UnhandledExceptionFilter
LdrFastFailInLoaderCallout
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2209
H9sHs<
Enhanced Engaged user response: Pick a time
EventUnregister
EngagedRebootFailedDialog
Message timeout updated via OneSettings.
currentContextName
Error Originate:InteractiveToast::BuildRebootPolicyEnabledDialogPayload:4242
C9fD9?u-
RtlNtStatusToDosErrorNoTeb
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2273
Policies are read successfully!
_o___std_exception_destroy
scheduledRebootTimeInUTC
GetSystemDirectoryW
D$0L;
FullCommandLine
VS_VERSION_INFO
Failed to determine if registry value HKLM\%ws\%ws[%ws] exists
api-ms-win-core-synch-l1-2-0.dll
Error Originate:InteractiveToast::InvokeRestartNow:3407
A_A^_^]
Warning:UnpSurfaceHelper::GetCampaignGuidCSV:75
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="2">%2</text><text id="2" hint-style="subheader" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="foreground" arguments="ForcedRemRestartNow" content="%4"/><action activationType="system" arguments="dismiss" content="%5"/></actions></toast>
NoQualityUpdatePending
SWAUAVAWH
.CRT$XCZ
RebootWithUXCalled
fB9<Cu
<toast %1 launch="Settings"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="2">%2</text><text id="2" hint-style="subheader" hint-maxLines="2">%3</text></binding></visual><actions><action imageUri="%7" activationType="foreground" arguments="ImmRestartNow" content="%4"/><action imageUri="%8" activationType="foreground" arguments="ImmAnotherTime" content="%5"/><action imageUri="%9" activationType="system" arguments="dismiss" content="%6"/></actions></toast>
Download\NoRangeRequests
Enhanced engaged forced warning dialog
map/set<T> too long
Error Originate:wWinMain:120
currentContextMessage
FairWarningDismiss
Exception
Install need EULA dialog
Reading the auto reboot limit from reg key
SendMessageW
USVWH
\$PE3
DEPRECATED Enhanced engaged first reminder dialog
fD9>u$H
CL$xH
.CRT$XPA
L$pE3
Update Option
Error Originate:MusUxStateAction::LaunchNotificationDialog:1329
.data
WUIconWindow
Error Originate:InteractiveToast::LaunchSettingsToScheduleReboot:2460
rebootState
Error Originate:UXElementStore::GetXmlFilePath:1080
deadlineInDays
Error Originate:InteractiveToast::InvokeUsoScheduleReboot:2594
CRYPT32.dll
97vkH
Error Originate:MusUxStateAction::LaunchRebootImminentDialog:1438
PathFileExistsW
Warning:UXElementStore::CheckIfScenarioApplicable:422
Error Originate:InteractiveToast::BuildSnoozeToastPayload:797
onecore\enduser\windowsupdate\muse\orchestrator\common\lib\batteryutil.cpp
\Settings
memset
[%hs]
Error Originate:InteractiveToast::ScheduleInteractiveReboot:3168
yQ97vBH
Error Originate:UpdateUtil::IsFeatureUpdatePending:1577
Error Originate:MusUxStateAction::GetLastRebootAttemptTime:2592
DTE Enabled by test hook
D98v6H
Interactive Toast is invoked
ms-settings:windowsupdate-history
\$ UVWAVAWH
GetProcAddress
Policy Notify deadline toast
u)A8y
Error Originate:SettingUtil::GetDefaultRebootUxStateEx:1351
Enhanced Engaged user response: Snooze on first reminder
SIHTraceLogging
bcrypt.dll
ProductName
)t|A+
Error Originate:MusToastNotification::BuildToastPayload:430
Error Originate:InteractiveToast::BuildSnoozeToastPayload:669
Error Originate:LoggingUtil::LogRebootScheduledTelemetryEvent:63
BCryptDestroyHash
H+T$hH
.idata$6
Auto Update\Results
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1169
Error Originate:InteractiveToast::BuildSnoozeToastPayload:854
Error Originate:MusUxStateAction::LaunchRebootActiveHoursImminentDialog:1964
WarnPickTime
Direct engaged fourth reminder dialog
Remove Ready to reboot toast
D$`E3
Error Originate:SettingUtil::GetDefaultRebootUxStateEx:1308
CertVerifyCertificateChainPolicy
Error Originate:InteractiveToast::BuildRebootPolicyEnabledDialogPayload:4253
api-ms-win-core-heap-l1-1-0.dll
UXElementStorePath
skipToAcceptAutoReminderInHours
Error Originate:MusUxStateAction::DisplayMusUxStateOnWCOS:731
Failed to show a notification for UX State because it is not implemented
OptionAsPlanned
Charge and Update, Desktop keep on reminder toast
@A_A^_^]
D$HE3
EngagedRebootReminder
Toast_DownloadNeedUserAgreement
CT$xH
ext-ms-win-session-wtsapi32-l1-1-0
Toast_InstallNeedEula
Error Originate:UXElementStore::ExtractValues:527
SchedulePickerOption
One settings: firstReminderCadenceInHours
Snooze until tomorrow
_o_malloc
t$ UWAVH
MoveFileW
ReminderToast
FileVersion
Timestamp of first reboot pending
One settings: forcedPrecursorToForcedDialogInHours
u%9|$`
Failed to retrieve updates for the reboot dialog telemetry events.
L$hH3
DTE Enabled by default for Ring
RestartFailedRetry
Schedule update dialog
p AWH
D$ @8
Toast_KeepAliveOnBatteryWarning
\$4D8e
Smart Active Hours are on because SBC velocity feature is configured on the device.
Enhanced engaged reboot reminder dialog
Value
t$ E3
Reboot postpone MGMT dialog
EnhancedEngagedRebootReminderToast
Error Originate:UpdateUtil::IsFeatureUpdate:1547
wilResult
{8uOH
Error Originate:UXElementStore::ExtractCurrentScenario:660
Error Originate:SettingUtil::GetDefaultRebootUxStateEx:1260
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2252
Error Originate:MusToastNotification::BuildToastPayload:390
<toast %1 launch="Setup"><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="subHeader" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="foreground" arguments="Setup" content="%4"/></actions></toast>
UAVAWH
A_A^_
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:1973
_o_exit
Error Originate:ActiveHoursUtil::GetDeviceActiveHours:104
Dialog_ScheduleUpdate
UsoUseOneCoreOOBENotification
u299vbH
intermediateAutoToUltimateAutoInHours
USVWATAVAWH
Device is in: Enter auto state
FileTimeToLocalFileTime
@Qm6t
ultimateAutoIgnorableReasons
Unknown exception
t,D9!v'
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2264
api-ms-win-crt-runtime-l1-1-0.dll
UXRebootState
{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}
J9>tFA
Active hours imminent dialog
Auto Update\PostRebootReporting
Toast_LaptopPlugInReminder
__std_terminate
neutral
D$PH;
Dialog_DataMigrationFailed
@UVWATAUAVAWH
CreateMutexExW
yT97vH
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1465
d$@D9e
EventRegister
<toast launch="%1" activationType="protocol" duration="long"><visual><binding template="ToastGeneric"><text id="1">%2</text><text id="2">%3</text></binding></visual></toast>
UtcTime
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4363
Warning:UXElementStore::GetImageFilePath:1249
UpdateOrchestratorRoot
Dialog_AllowSchedulingSecondReminder
A_A^_^]
DeleteFileW
A8]8t
Download via cellular need user agreement toast
CoInitializeEx
98v3H
onecore\enduser\windowsupdate\muse\orchestrator\common\lib\filemanager.cpp
Warning:UnpSurfaceHelper::GetCampaignGuidCSV:148
A_A^A\_^
HeapAlloc
t%D9!v
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1522
`A^A\_^]
UIFILE
Toast_DownloadNeedMoreSpace
9t$ u
D9d$0
Error Originate:InteractiveToast::BuildNotifyDialogPayload:3871
Error Originate:InteractiveToast::ScheduleInteractiveReboot:3179
<toast scenario = "reminder"><visual><binding template="ToastGeneric"><text id="1">%2</text><text id="2">%3</text></binding></visual><actions><action activationType="protocol" arguments="%4" content="%5"/><action activationType="protocol" arguments="%6" content="%7"/></actions></toast>
Error Originate:InteractiveToast::BuildAllowSchedulingRebootFailedDialogPayload:4515
Failed to check if reboot should be canceled for blocking apps
.data$brc
RemSnooze
L$pH3
Services
Error Originate:MusUxStateAction::LaunchRebootPostponeMgmtDialog:2417
NotificationUX took too long to launch, cancelling the dialog.
Could not create broadcasting thread
scheduledRebootTime
H3E H3E
InternalName
DynamicInstalledProducts
Error Originate:InteractiveToast::BuildPowerRelatedToastPayload:1872
<toast %1><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="body" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="background" arguments="%6" content="%4"/><action activationType="background" arguments="%7" content="%5"/></actions></toast>
Error in launching settings update page
Error Propagate:InteractiveToast::InvokeRestartNow
FlightRebootTime
Warning:UXElementStore::ExtractValues:543
UpdateNotificationLevel Policy is Configured
IsProcessorFeaturePresent
fF9,Au
api-ms-win-core-profile-l1-1-0.dll
_o_wcstoul
SystemSetup
f;D$0u
Error Originate:UpdateUtil::IsFeatureUpdatePending:1621
BCryptCloseAlgorithmProvider
.rsrc$02
Error Originate:LoggingUtil::LogRebootScheduledTelemetryEvent:139
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1131
InvokedArgs
UXActiveHoursEnd
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingFirstReminderDialog:2731
t?D9!v:H
Error Originate:UpdateUtil::GetRebootRequiredTimestamp:2418
en-US
t$H9\$0
campaign name
FindNextFileW
Error Originate:InteractiveToast::BuildAllowSchedulingReminderDialogPayload:4339
rebootScheduledByUser
OLEAUT32.dll
BCryptGetProperty
CoSetProxyBlanket
Broadcast message result
ActiveHoursStart
.text$di
C D8U@u
FindClose
Toast_FairWarningDesktop
originatingContextMessage
Using previously persisted global flight reboot time to enforce reboot.
Could not determine user presence, assuming inactive
Dialog_RebootActiveHoursForcedWarning
VWATAVAWH
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingWarningDialog:3067
D9d$D
Error Originate:MusUxStateAction::GetScheduledRebootTime:2493
Warning:UXElementStore::ExtractCurrentScenario:649
L$(H3
api-ms-win-stateseparation-helpers-l1-1-0.dll
OtzA+
Error Originate:InteractiveToast::BuildForcedReminderToastPayload:2234
Restart Now
GetCurrentProcessId
RebootFailedToast
Error Originate:SettingUtil::IsDeviceInAutoRebootLimit:1096
L$XH3
_o__wcsicmp
Error Originate:MusUxStateAction::LaunchRebootActiveHoursForcedReminderDialog:2055
.rdata$zETW0
CreateThreadpoolTimer
Direct To Engaged logic values:
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1006
WarnRestartNow
api-ms-win-core-file-l1-1-0.dll
D;t$@
Error Originate:MusUxStateAction::ShowToastRebootReminder:845
Error Originate:InteractiveToast::BuildNotifyUpdatesToastPayload:1769
DelayLoadFailureHook
Auto Update\CommitRequired
0A^_^][
WaitForSingleObjectEx
No arguments detected for toast activation, expected 1, got %d
Error Originate:MusUxStateAction::ShowToastRebootReminder:861
Error Originate:InteractiveToast::PostToast:367
Error Originate:InteractiveToast::BuildRebootPolicyEnabledDialogPayload:4218
UsoPPIUpdate
Error Originate:MusUxStateAction::DisplayMusUxState:585
Preparing to reboot and commit
api-ms-win-eventing-controller-l1-1-0.dll
WindowsUpdate
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1649
onecore\enduser\windowsupdate\muse\ux\utilities\updateutil.cpp
tHH;1u4H
Dialog_AllowSchedulingWarning
L$0M9a sEI
TzSpecificLocalTimeToSystemTime
Error Originate:ActiveHoursUtil::GetDeviceActiveHours:162
Error Originate:MusUxStateAction::LaunchRebootActiveHoursUserSelectedDialog:1825
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1043
EnhancedEngagedRebootForcedWarningDialog
@USWH
@USVWH
Active hours forced reminder toast
CoTaskMemFree
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingSecondReminderDialog:2834
Device in auto reboot limit:
rMfD9?w
Error Originate:InteractiveToast::CreateUpdateResultsTaskSchedule:3291
L;O r
onecore\enduser\windowsupdate\muse\ux\utilities\policyutil.cpp
Toast_InstallNeedMoreSpace
.CRT$XIZ
PathCchAppend
UsoMuServiceDefault
Error Originate:InteractiveToast::BuildSnoozeToastPayload:724
H;P A
No updates requiring reboot found for the ToastNotificationDisplayed event.
One settings: toastToDialogReminderInHours
dialogRebootReminderCadenceInHours
Error Originate:InteractiveToast::InvokeUsoScheduleReboot:2563
Handler
InitializeCriticalSectionEx
CD$XH
Error Originate:UXElementStore::GetUserLocale:905
Oldest reboot update local time
!This program cannot be run in DOS mode.
Quality Update found in the applicable updates
Msg:[%ws]
Feature Update pending
@A^_^
A_A^A]_^[]
FairWarningToast
Download need user agreement toast
Error Originate:wWinMain:188
RebootWithBlockingApps
minATL$__f
api-ms-win-eventing-provider-l1-1-0.dll
Error Originate:UXElementStore::ExtractCurrentScenario:649
toasts
A_A^A]A\_^[
Enhanced engaged forced precursor dialog
Getting the default auto reboot limit in days
Error Originate:UpdateUtil::GetDaysSinceRebootRequired:2527
Reboot deadline in days
L$ H+
isUltimateForcedModeEnabled
L$0H!D$
DTE Enabled from OneSettings
Error Originate:InteractiveToast::DisplayDialog:3539
A^_^[]
Reboot smart scheduling limit read from OneSettings:
Error Originate:MusToastNotification::PostToastNotification:117
GetCurrentThread
forcedToUltimateForcedModeInHours
api-ms-win-core-synch-l1-1-0.dll
UsoACPowerCheckBeforeStaging
D$ fD
Redirection Id %ws not found in default map.
api-ms-win-core-registry-l1-1-1.dll
Enhanced Engaged user response: Restart now
L9{@u
OpenSemaphoreW
Error Originate:InteractiveToast::RegisterClassW:77
Error Originate:UXElementStore::Initialize:213
Failed disk space check toast
FallbackError
rebootArgument
!\$ H
ET$`E
Error Originate:UXElementStore::Initialize:197
EnterCriticalSection
.CRT$XCU
D93vFH
\$ E3
FeatureUpdatePending
_o__get_wide_winmain_command_line
Interactive Dialog: Dialog template not found
AutoRebootLimitInDays
Restart anyway
H;H s
D9 v7H
Dialog_RebootForcedDTU
toastRebootReminderCadenceInHours
%hs(%d) tid(%x) %08X %ws
2333333
9C s!H
Warning:UXElementStore::Initialize:213
GetCurrentProcess
Cant install update dialog
DeferRestartInHour
Enhanced Engaged Intermediate Auto Reboot Mode
Error Originate:InteractiveToast::BuildRebootDialogPayload:4096
AllowNotificationUx
gfffffffL+
<toast %1 launch="RemPickTime"><visual><binding template="ToastGeneric"><image placement="hero" src="%14"/><text id="1" hint-style="header" hint-maxLines="1">%3</text><text id="3" hint-style="subheader" hint-maxLines="2">%2</text></binding></visual><actions><action imageUri="%15" activationType="foreground" arguments="RemRestartNow" content="%7"/><action imageUri="%17" activationType="foreground" arguments="RemPickTime" content="%5"/><action imageUri="%16" activationType="background" arguments="RemSnooze" content="%9"/></actions></toast>
SnoozeUx
Warning:ActiveHoursUtil::GetNextRebootTime:485
:SettingsETag
fileName
d$ E3
Policy enabled forced warning dialog
Error Originate:wWinMain:197
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1089
Scheduled RebootTime
.OptionTomorrow
Error Originate:InteractiveToast::BuildRebootFailedToastPayload:1599
settings
Error Originate:InteractiveToast::InvokeRestartNow:3377
LocalFree
Settings update page launched successfully
RebootWithUXForceOthers
D$8E3
.?AVResultException@wil@@
Error Originate:InteractiveToast::BuildNotifyUpdatesToastPayload:1781
Dialog_EngagedFourthReminder
Error Originate:MusUxStateAction::GetScheduledRebootTime:2505
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2115
.didat$3
A_A^_^][
)D$@D
Translation
api-ms-win-power-setting-l1-1-0.dll
D98v&H
Pending Update status:
Settings update restart options page launched successfully
Warning:UXElementStore::CheckIfScenarioApplicable:404
UpdateId
Error Originate:UXElementStore::GetUserLocale:922
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2073
WilError_02
D9(vHH
ti@85@
Error Originate:UXElementStore::GetStringValue:753
Error Originate:MusUxStateAction::DisplayDialog:1173
Snooze until 3 days. No action is needed as this is scheduled as default.
_o__callnewh
Error Originate:MusUxStateAction::LaunchEnhancedEngagedRebootReminderDialog:3788
LowDiskToast
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingWarningDialog:3037
DialogNotificationToBeDisplayed
RestartNotificationsAllowed2
.CRT$XIAC
ProductVersion
FlushFileBuffers
Error Originate:wWinMain:236
Error Originate:UXElementStore::ExtractValues:543
Toast_RebootActiveHoursImminent
Error Originate:UXElementStore::GetUserLocale:928
.didat$4
__CxxFrameHandler3
EngagedReboot
.CRT$XIAA
Option1Hour
Error Originate:UpdateUtil::GetRestartRequiredUpdateIdentifiers:2642
Toast_EngagedSecondReminder
A_A^A\_^[]
failureType
L$PD9
Windows
onecore\enduser\windowsupdate\muse\ux\utilities\unpsurfacehelper.cpp
LastAttemptedRebootTime
hresult
Error Originate:MusToastNotification::BuildToastPayload:419
D$0E3
Use smart scheduling for reboot
unH9A
fD9(t
Scenario requested is inapplicable.
9|$0u
Error Originate:MusUxStateAction::LaunchRebootPostponeMgmtDialog:2438
Saving reboot time in session variable failed
.idata$2
D9 v=H
x AVH
Error Originate:MusUxStateAction::LaunchRebootActiveHoursImminentDialog:1941
api-ms-win-core-debug-l1-1-0.dll
Update successful with mitigation toast
MusNotificationUx.exe
Use smart active hours
Error Originate:UpdateUtil::GetRestartRequiredUpdateIdentifiers:2670
tFH!\$(L
Pick a Time
GetExitCodeThread
LookupPrivilegeValueW
Error Originate:InteractiveToast::BuildRebootImminentToastPayload:2016
GetSmartActiveHours
.xdata
.gfids
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingWarningDialog:3046
EnhancedEngagedRebootReminderDialog
Policy AutoRestartDeadlineDays is set
FeatureUpdate reg key is overwriting the actual update type to show toasts.
XmlLite.dll
%hs(%d)\%hs!%p:
Operating System
Error Originate:InteractiveToast::PostToast:472
Ready to reboot persistent toast
NotifyRestartNow
Direct To Engaged Disabled through OneSettings
Error Originate:MusUxStateAction::LaunchRebootPolicyDeadlineEnabledForcedWarningDialog:2311
vector<T> too long
D$@yE
@.didat
ugD9(vYH
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingThirdReminderDialog:2937
Yt[A+
GetModuleHandleExW
Error Originate:MusUxStateAction::SendNotificationToBeDisplayedEvent:3500
RebootScheduledByUser
!M;` s_H
H;K`H
Error Originate:MusToastNotification::BuildToastPayload:405
Policy AutoRestartDeadlineDays is configured
EngagedRebootFirstReminderDialog
GetLocalTime
Error Originate:UpdateUtil::GetRestartRequiredUpdateIdentifiers:2655
Error Originate:wWinMain:142
ms-musux:snoozedefault
Dialog_RebootWarning
\$X@2
t$ WATAUAVAWH
Settings
GetLastError
@USVWATAUAVAWH
UWAWH
Warning:UXElementStore::Initialize:197
image
AuthD
LogHr
Error Originate:wWinMain:164
Reboot countdown is zero so notification is not shown.
UpdateOrchestratorConfigurationRoot
DtuSelfhost
Starting time to find next reboot time is in the past. Choose another time.
Response Data
Notification Ux State reason is out of range
98v?H
Failed to get active hours end from policy value, setting default value
UserResponseString
Error Originate:InteractiveToast::BuildRebootWarningToastPayload:1018
Error Originate:PolicyUtil::GetMgmtUpdatePolicy:2131
CommandLineToArgvW
Start
Notification ux state
D9|$0
api-ms-win-security-lsalookup-l2-1-0.dll
FairWarningPolicyNotifyDeadlineToast
pA_A^A]A\_^]
Warning:UXElementStore::GetXmlFilePath:1135
UsoACPowerCheckBeforeDownload
api-ms-win-core-timezone-l1-1-0.dll
SmartSchedulingOn
ext-ms-win-session-winsta-l1-1-3
ext-ms-win-shell-shell32-l1-2-0
Error Originate:MusUxStateAction::SendNotificationToBeDisplayedEvent:3566
A_A^A]A\]
InitOnceBeginInitialize
_o___stdio_common_vsnprintf_s
Enhanced Engaged user response: Default action was chosen automatically or by user
Restart in 30 minutes
Error Originate:InteractiveToast::BuildPowerRelatedToastPayload:1884
Error Originate:MusUxStateAction::LaunchRebootAllowSchedulingRebootFailedDialog:3148
RegCloseKey
ext-ms-win-shell-shell32-l1-2-2
Error in launching schedule reboot in uso session
ForceRebootReminderDialogDisplayed
Error Originate:UXElementStore::GetUserLocale:869
Smart scheduler is using the configured value of the velocity feature
Toast_NotifyToInstall
<toast %1><visual><binding template="ToastGeneric"><text id="1" hint-style="header" hint-maxLines="1">%2</text><text id="2" hint-style="body" hint-maxLines="2">%3</text></binding></visual><actions><action activationType="background" arguments="%6" content="%4"/><action activationType="background" arguments="%7" content="%5"/><action activationType="background" arguments="%9" content="%8"/></actions></toast>
H;D$(u
Error Originate:MusUxStateAction::LaunchNotificationDialog:1298
The argument is not valid
lineNumber
No updates requiring reboot found for the reboot dialog telemetry events.
OptionTonight
Error Propagate:InteractiveToast::CreateUpdateResultsTaskSchedule
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | PDB Path | Compile Time | Import Hash |
|---|---|---|---|---|---|---|---|
| 0x140000000 | 0x0002eb70 | 0x0006728d | 0x0006728d | 10.0 | MusNotificationUx.pdb | 2022-04-14 20:50:40 | a685af469c29d7da37fa8ebb21d8b479 |
Version Infos
| CompanyName | Microsoft Corporation |
|---|---|
| FileDescription | MusNotificationUx.exe |
| FileVersion | 10.0.17763.292 (WinBuild.160101.0800) |
| InternalName | MusNotificationUx.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | MusNotificationUx.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.17763.292 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x00038714 | 0x00038800 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.32 |
| .imrsiv | 0x00000000 | 0x0003a000 | 0x00000004 | 0x00000000 | IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 0.00 |
| .rdata | 0x00038c00 | 0x0003b000 | 0x00022804 | 0x00022a00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 4.82 |
| .data | 0x0005b600 | 0x0005e000 | 0x00000f90 | 0x00000600 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 2.30 |
| .pdata | 0x0005bc00 | 0x0005f000 | 0x0000204c | 0x00002200 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.37 |
| .didat | 0x0005de00 | 0x00062000 | 0x00000078 | 0x00000200 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 0.79 |
| .rsrc | 0x0005e000 | 0x00063000 | 0x000006d8 | 0x00000800 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 3.56 |
| .reloc | 0x0005e800 | 0x00064000 | 0x000002d4 | 0x00000400 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ | 4.30 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| MUI | 0x00063600 | 0x000000d8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.75 | None |
| UIFILE | 0x000634c0 | 0x0000013e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.90 | None |
| RT_VERSION | 0x00063100 | 0x000003c0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.50 | None |
Imports
| Name | Address |
|---|---|
| _initterm_e | 0x14003c120 |
| _c_exit | 0x14003c128 |
| _register_thread_local_exe_atexit_callback | 0x14003c130 |
| _initterm | 0x14003c138 |
| Name | Address |
|---|---|
| CommandLineToArgvW | 0x14003c1f0 |
| Name | Address |
|---|---|
| LocalAlloc | 0x14003bcb8 |
| LocalFree | 0x14003bcc0 |
| Name | Address |
|---|---|
| GetModuleFileNameA | 0x14003bcf0 |
| LoadStringW | 0x14003bcf8 |
| GetModuleHandleW | 0x14003bd00 |
| GetProcAddress | 0x14003bd08 |
| LoadLibraryExW | 0x14003bd10 |
| FreeLibrary | 0x14003bd18 |
| GetModuleHandleExW | 0x14003bd20 |
| Name | Address |
|---|---|
| GetUserPreferredUILanguages | 0x14003bd30 |
| FormatMessageW | 0x14003bd38 |
| Name | Address |
|---|---|
| GetCurrentThread | 0x14003bd90 |
| GetExitCodeThread | 0x14003bd98 |
| CreateThread | 0x14003bda0 |
| OpenThreadToken | 0x14003bda8 |
| GetCurrentProcess | 0x14003bdb0 |
| GetCurrentProcessId | 0x14003bdb8 |
| TerminateProcess | 0x14003bdc0 |
| OpenProcessToken | 0x14003bdc8 |
| GetCurrentThreadId | 0x14003bdd0 |
| GetStartupInfoW | 0x14003bdd8 |
| Name | Address |
|---|---|
| GetProcessHeap | 0x14003bc98 |
| HeapFree | 0x14003bca0 |
| HeapAlloc | 0x14003bca8 |
| Name | Address |
|---|---|
| DebugBreak | 0x14003bba0 |
| IsDebuggerPresent | 0x14003bba8 |
| OutputDebugStringW | 0x14003bbb0 |
| Name | Address |
|---|---|
| GetLastError | 0x14003bbe0 |
| SetLastError | 0x14003bbe8 |
| RaiseException | 0x14003bbf0 |
| UnhandledExceptionFilter | 0x14003bbf8 |
| SetUnhandledExceptionFilter | 0x14003bc00 |
| Name | Address |
|---|---|
| CreateMutexExW | 0x14003be80 |
| DeleteCriticalSection | 0x14003be88 |
| AcquireSRWLockShared | 0x14003be90 |
| CreateSemaphoreExW | 0x14003be98 |
| EnterCriticalSection | 0x14003bea0 |
| SetEvent | 0x14003bea8 |
| CreateEventW | 0x14003beb0 |
| ReleaseSRWLockShared | 0x14003beb8 |
| InitializeCriticalSectionEx | 0x14003bec0 |
| LeaveCriticalSection | 0x14003bec8 |
| CreateEventExW | 0x14003bed0 |
| AcquireSRWLockExclusive | 0x14003bed8 |
| ReleaseMutex | 0x14003bee0 |
| ReleaseSemaphore | 0x14003bee8 |
| OpenSemaphoreW | 0x14003bef0 |
| WaitForSingleObjectEx | 0x14003bef8 |
| ReleaseSRWLockExclusive | 0x14003bf00 |
| ResetEvent | 0x14003bf08 |
| WaitForSingleObject | 0x14003bf10 |
| Name | Address |
|---|---|
| CloseHandle | 0x14003bc88 |
| Name | Address |
|---|---|
| CoTaskMemFree | 0x14003bb58 |
| CoCreateInstance | 0x14003bb60 |
| CoInitializeEx | 0x14003bb68 |
| CoSetProxyBlanket | 0x14003bb70 |
| CoRegisterClassObject | 0x14003bb78 |
| CoUninitialize | 0x14003bb80 |
| CoWaitForMultipleHandles | 0x14003bb88 |
| CoCreateFreeThreadedMarshaler | 0x14003bb90 |
| Name | Address |
|---|---|
| EventSetInformation | 0x14003c190 |
| EventWriteTransfer | 0x14003c198 |
| EventUnregister | 0x14003c1a0 |
| EventRegister | 0x14003c1a8 |
| Name | Address |
|---|---|
| GetSystemTime | 0x14003bf40 |
| GetLocalTime | 0x14003bf48 |
| GetSystemDirectoryW | 0x14003bf50 |
| GetTickCount | 0x14003bf58 |
| GetSystemTimeAsFileTime | 0x14003bf60 |
| Name | Address |
|---|---|
| GetCommandLineW | 0x14003bd78 |
| ExpandEnvironmentStringsW | 0x14003bd80 |
| Name | Address |
|---|---|
| InitOnceBeginInitialize | 0x14003bf20 |
| InitOnceComplete | 0x14003bf28 |
| Sleep | 0x14003bf30 |
| Name | Address |
|---|---|
| RoOriginateError | 0x14003bfb8 |
| Name | Address |
|---|---|
| RtlLookupFunctionEntry | 0x14003be40 |
| RtlCaptureContext | 0x14003be48 |
| RtlVirtualUnwind | 0x14003be50 |
| Name | Address |
|---|---|
| IsProcessorFeaturePresent | 0x14003bde8 |
| Name | Address |
|---|---|
| QueryPerformanceCounter | 0x14003bdf8 |
| Name | Address |
|---|---|
| InitializeSListHead | 0x14003bcd0 |
| Name | Address |
|---|---|
| GetDefaultConfiguration | 0x14003bb20 |
| GetSmartBusyCheckVelocityFeature | 0x14003bb28 |
| GetSmartActiveHours | 0x14003bb30 |
| GetNextAcceptableTimeEx | 0x14003bb38 |
| Name | Address |
|---|---|
| ?_Xlength_error@std@@YAXPEBD@Z | 0x14003c250 |
| Name | Address |
|---|---|
| VariantInit | 0x14003baf8 |
| VariantClear | 0x14003bb00 |
| VariantChangeType | 0x14003bb08 |
| VariantCopy | 0x14003bb10 |
| Name | Address |
|---|---|
| FileTimeToLocalFileTime | 0x14003bc10 |
| CompareFileTime | 0x14003bc18 |
| FindClose | 0x14003bc20 |
| CreateFileW | 0x14003bc28 |
| CreateDirectoryW | 0x14003bc30 |
| LocalFileTimeToFileTime | 0x14003bc38 |
| DeleteFileW | 0x14003bc40 |
| GetFileAttributesW | 0x14003bc48 |
| WriteFile | 0x14003bc50 |
| SetEndOfFile | 0x14003bc58 |
| FindNextFileW | 0x14003bc60 |
| ReadFile | 0x14003bc68 |
| FindFirstFileW | 0x14003bc70 |
| FlushFileBuffers | 0x14003bc78 |
| Name | Address |
|---|---|
| TzSpecificLocalTimeToSystemTime | 0x14003bf98 |
| FileTimeToSystemTime | 0x14003bfa0 |
| SystemTimeToFileTime | 0x14003bfa8 |
| Name | Address |
|---|---|
| RtlGetDeviceFamilyInfoEnum | 0x14003c260 |
| RtlRandomEx | 0x14003c268 |
| RtlNtStatusToDosError | 0x14003c270 |
| Name | Address |
|---|---|
| WindowsCreateStringReference | 0x14003bfd8 |
| Name | Address |
|---|---|
| CloseThreadpoolTimer | 0x14003bf70 |
| SetThreadpoolTimer | 0x14003bf78 |
| WaitForThreadpoolTimerCallbacks | 0x14003bf80 |
| CreateThreadpoolTimer | 0x14003bf88 |
| Name | Address |
|---|---|
| RoGetActivationFactory | 0x14003bfc8 |
| Name | Address |
|---|---|
| MoveFileW | 0x14003bce0 |
| Name | Address |
|---|---|
| StartTraceW | 0x14003c160 |
| ControlTraceW | 0x14003c168 |
| EnableTraceEx2 | 0x14003c170 |
| Name | Address |
|---|---|
| QueryTraceW | 0x14003c180 |
| Name | Address |
|---|---|
| RegOpenKeyExW | 0x14003be08 |
| RegQueryValueExW | 0x14003be10 |
| RegGetValueW | 0x14003be18 |
| RegCloseKey | 0x14003be20 |
| Name | Address |
|---|---|
| RegSetKeyValueW | 0x14003be30 |
| Name | Address |
|---|---|
| GetPersistedRegistryLocationW | 0x14003c200 |
| Name | Address |
|---|---|
| GetTokenInformation | 0x14003c1c8 |
| AdjustTokenPrivileges | 0x14003c1d0 |
| Name | Address |
|---|---|
| InitiateShutdownW | 0x14003be70 |
| Name | Address |
|---|---|
| CallNtPowerInformation | 0x14003c1b8 |
| Name | Address |
|---|---|
| PathFileExistsW | 0x14003be60 |
| Name | Address |
|---|---|
| PathCchSkipRoot | 0x14003bd48 |
| PathCchCanonicalize | 0x14003bd50 |
| PathCchAppend | 0x14003bd58 |
| PathCchRemoveBackslash | 0x14003bd60 |
| PathAllocCanonicalize | 0x14003bd68 |
| Name | Address |
|---|---|
| LookupPrivilegeValueW | 0x14003c1e0 |
| Name | Address |
|---|---|
| CreateXmlReader | 0x14003bb48 |
| Name | Address |
|---|---|
| BCryptCreateHash | 0x14003c210 |
| BCryptCloseAlgorithmProvider | 0x14003c218 |
| BCryptGetProperty | 0x14003c220 |
| BCryptOpenAlgorithmProvider | 0x14003c228 |
| BCryptHashData | 0x14003c230 |
| BCryptFinishHash | 0x14003c238 |
| BCryptDestroyHash | 0x14003c240 |
| Name | Address |
|---|---|
| CertVerifyCertificateChainPolicy | 0x14003bad8 |
| Name | Address |
|---|---|
| ResolveDelayLoadedAPI | 0x14003bbd0 |
| Name | Address |
|---|---|
| DelayLoadFailureHook | 0x14003bbc0 |
| Name | Address |
|---|---|
| EncodeBase64W | 0x14003bae8 |
Usage
Processing ( 0.63 seconds )
- 0.623 CAPE
- 0.007 AnalysisInfo
- 0.001 Debug
Signatures ( 0.06 seconds )
- 0.009 antianalysis_detectfile
- 0.008 ransomware_files
- 0.005 antiav_detectreg
- 0.005 ransomware_extensions
- 0.003 ursnif_behavior
- 0.002 antiav_detectfile
- 0.002 infostealer_ftp
- 0.002 poullight_files
- 0.002 territorial_disputes_sigs
- 0.001 banker_zeus_p2p
- 0.001 bot_drive
- 0.001 bot_drive2
- 0.001 antianalysis_detectreg
- 0.001 antivm_vbox_files
- 0.001 antivm_vbox_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 infostealer_bitcoin
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 infostealer_im
- 0.001 infostealer_mail
- 0.001 masquerade_process_name
- 0.001 revil_mutexes
- 0.001 modirat_behavior
Reporting ( 0.00 seconds )
- 0.001 CAPASummary
Signatures
The PE file contains a PDB path
pdbpath: MusNotificationUx.pdb
The binary contains an unknown PE section name indicative of packing
unknown section: {'name': '.imrsiv', 'raw_address': '0x00000000', 'virtual_address': '0x0003a000', 'virtual_size': '0x00000004', 'size_of_data': '0x00000000', 'characteristics': 'IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE', 'characteristics_raw': '0xc0000080', 'entropy': '0.00'}
unknown section: {'name': '.didat', 'raw_address': '0x0005de00', 'virtual_address': '0x00062000', 'virtual_size': '0x00000078', 'size_of_data': '0x00000200', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE', 'characteristics_raw': '0xc0000040', 'entropy': '0.79'}
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.