Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-13 03:01:23 | 2025-06-13 03:32:18 | 1855 seconds | Show Options | Show Analysis Log |
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:14,897 [root] INFO: Date set to: 20250612T19:09:43, timeout set to: 1800 2025-06-12 20:09:43,395 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8 2025-06-12 20:09:43,426 [root] DEBUG: Storing results at: C:\nvRcCS 2025-06-12 20:09:43,426 [root] DEBUG: Pipe server name: \\.\PIPE\ygcqzFMNOh 2025-06-12 20:09:43,426 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-12 20:09:43,426 [root] INFO: analysis running as an admin 2025-06-12 20:09:43,426 [root] INFO: analysis package specified: "exe" 2025-06-12 20:09:43,426 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-12 20:09:44,160 [root] DEBUG: imported analysis package "exe" 2025-06-12 20:09:44,160 [root] DEBUG: initializing analysis package "exe"... 2025-06-12 20:09:44,160 [lib.common.common] INFO: wrapping 2025-06-12 20:09:44,160 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-12 20:09:44,160 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\MSBuild.exe 2025-06-12 20:09:44,176 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-12 20:09:44,176 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-12 20:09:44,176 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-12 20:09:44,176 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-12 20:09:44,363 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-12 20:09:44,379 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-12 20:09:44,395 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-12 20:09:44,410 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-12 20:09:44,457 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-12 20:09:44,489 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-12 20:09:44,489 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-12 20:09:44,504 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-12 20:09:44,504 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-12 20:09:44,504 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-12 20:09:44,504 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-12 20:09:44,504 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-12 20:09:44,504 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-12 20:09:44,504 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-12 20:09:44,504 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-12 20:09:44,504 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-12 20:09:44,504 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-12 20:09:44,504 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-12 20:09:56,051 [modules.auxiliary.digisig] DEBUG: File has a valid signature 2025-06-12 20:09:56,067 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-12 20:09:56,067 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-12 20:09:56,067 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-12 20:09:56,067 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-12 20:09:56,067 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-12 20:09:56,067 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-12 20:09:56,067 [modules.auxiliary.disguise] INFO: Disguising GUID to 17f92b02-79d2-44f4-a080-01a9f0954dcc 2025-06-12 20:09:56,067 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-12 20:09:56,067 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-12 20:09:56,067 [root] DEBUG: attempting to configure 'Human' from data 2025-06-12 20:09:56,067 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-12 20:09:56,067 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-12 20:09:56,067 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-12 20:09:56,067 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-12 20:09:56,067 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-12 20:09:56,067 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-12 20:09:56,067 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-12 20:09:56,067 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-12 20:09:56,067 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-12 20:09:56,082 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-12 20:09:56,082 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-12 20:09:56,082 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-12 20:09:56,082 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-12 20:09:56,082 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-12 20:09:56,161 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini 2025-06-12 20:09:56,161 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-12 20:09:56,161 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-12 20:09:56,161 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-12 20:09:56,161 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-12 20:09:56,161 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-12 20:09:56,161 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-12 20:09:56,161 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\SvhbRq.dll, loader C:\tmp_gell1p8\bin\DAYmMlFe.exe 2025-06-12 20:09:56,223 [root] DEBUG: Loader: IAT patching disabled. 2025-06-12 20:09:56,223 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\SvhbRq.dll. 2025-06-12 20:09:56,238 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-12 20:09:56,238 [root] INFO: Disabling sleep skipping. 2025-06-12 20:09:56,254 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-12 20:09:56,254 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-12 20:09:56,254 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-12 20:09:56,254 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-12 20:09:56,254 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-12 20:09:56,254 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-12 20:09:56,270 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-12 20:09:56,270 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-12 20:09:56,270 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF822E30000, thread 892, image base 0x00007FF60D500000, stack from 0x0000008EFACF4000-0x0000008EFAD00000 2025-06-12 20:09:56,270 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-12 20:09:56,285 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-12 20:09:56,285 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-12 20:09:56,285 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\SvhbRq.dll. 2025-06-12 20:09:56,285 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-12 20:09:56,285 [ro <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-13 03:01:23 | 2025-06-13 03:31:59 | none |
File Details
| File Name |
MSBuild.exe
|
|---|---|
| File Type | PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows |
| File Size | 261712 bytes |
| MD5 | 4d7d4d92dc7d86b72abf81821ff83837 |
| SHA1 | 9672cade96c657a8860d60923afdbe4c46a2935d |
| SHA256 | b60eb62f6c24d4a495a0dab95cc49624ac5099a2cc21f8bd010a410401ab8cc3 [VT] [MWDB] [Bazaar] |
| SHA3-384 | abeac60633c9445c5844d38c821e5ed1cab4739a11c00a427af8ef60d5610075831b53fdae98e9724e6d9a7d88cf2f16 |
| CRC32 | C92D115E |
| TLSH | T180446A0163ED4615F6FF1AB4B8B056158B76F957E822D35E388CA1AC0F73780EA60763 |
| Ssdeep | 3072:Oao0QHGUQWWimj9q/NLpj/WWqvAw2XpFU4rwOeOubZS5f02RFi6x2u23dT:1oZTTWxxqVpqWVRXfVZ02biArSd |
| PE DotNET | File Strings BinGraph Vba2Graph VirusTotal de4dot (0.75) |
MSB5014: File format version is not recognized. MSBuild can only read solution files between versions {0}.0 and {1}.0, inclusive.
]^v*X
VERBOSITY=DIAG
LastIndexOf
IsValidMSBuildRuntimeValue
get_SourceUri
AssemblyNameExtension
set_NodeExeLocation
GetCreationTime
ContainsValueAndIsEqual
get_IsUnnamedAssembly
MSBUILDLAUNCHDEBUGGER
lightUpKeyRead
Microsoft.Internal.Performance.CodeMarkers.dll
"n" if present can be a digit from 1-9.
mscorlib
System.Collections.IDictionary.Values
bMSB5015: The properties could not be read from the WebsiteProperties section of the "{0}" project.
ParameterlessSwitchInfo
externalProjectStartedEventArgs
AssemblySignatureKeyAttribute
Marshal
remove_AssemblyResolve
IsValueTypeOutputParameter
mscoree.dll
propertyBag
Select
/distributedlogger:<central logger>*<forwarding logger>
get_IsClass
loadInfo
hugeMru
A14p,C
get_ExecutingAssemblyPath
error
set_ItemSpec
nNumberOfBytesToRead
ThrowExceptionForErrorCode
largeMru
PROCESS_SET_SESSIONID
DumpExceptionToFile
HasLoadInSeparateAppDomainAttribute
ExitStatus
f^H*V
PROCESS_VM_READ
WeakReference
ftLastWriteTimeHigh
INodePacketFactory
FJZ)V
*.sln
SkipVerification
Should always have an explicit runtime when we call this method.
BinaryFormatter
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
taskHostConfiguration
ConflictingTaskAssembly
commandLineArgs
DeserializeAndRoutePacket
reflectionOnlyloadInfoToTypeLock
ForceNoAlign--Does not align the text to the size of
0O)/;GY
get_EndLineNumber
factory
GetLongPathName
DllPerfCodeMarker
ThreadAbortException
to use during build. This version will override the
executeTargets
<ReportStatistics>b__24_3
ContainsToolset
BeginRead
UNCPattern
4.0.0.0
get_IsValueCreated
ProcessLoggingSwitches
buildErrorEventArgs
IBuildEngine2
op_Inequality
IEnumerable
HelpMessage_20_FileLoggerSwitch
nodeNumber
MSBUILDMEMORYUSELIMIT
lpFileInformation
ContainsReservedCharacters
</security>
SYNCHRONIZE
get_Capacity
PendBuildRequest
S_FALSE
KMSB5011: Parent project GUID not found in "{0}" project dependency section.
/MSBUILD : error MSB1006: Property is not valid.
typefilter
AccessControlType
Elimination assumes that strings provided were unique objects.
<ReportStatistics>b__24_4
specify each property separately. (Short form: /p)
EMSBUILD : MSB1045: Stopping because of syntax errors in project file.
get_LoggerSwitchParameters
Deserialize
VerifyThrowInitializationExceptionWithResource
numericValue
BuildRequestUnblocker
get_TargetNames
CreateAssemblyName
get_HasNoClones
InitializeLifetimeService
writer
Combine
activeBuild
SplitUnquoted
%f:\dd\tools\devdiv\FinalPublicKey.snk
O0M0K
APPICON
NotExpectedIoOrXmlException
candidate
distributedLoggerRecords
Microsoft Corporation
MSBUILD : Logger error {0}: {1}
D=xz#
TaskHostTaskCancelled
filePart
/toolsversion:<version>
MSBUILDLOGTASKINPUTS
SolutionParseInvalidSolutionConfigurationEntry
environmentVariable
ArgumentOutOfRangeException
GetInstanceNames
form: /val)
ContinueOnError
throwIfPresent
whatIfInfinite
BuildAbortedException
System.Security.Policy
runtimeA
KERNEL32.DLL
ftCreationTimeLow
/target:<targets> Build these targets in this project. Use a semicolon or a
TryAdd
get_Now
parameters for the fileLogger can be specified through
chars) Held
System.Collections.IDictionary.Item
pwszVersion
get_Result
afterTargets
>http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0
BuildProjectFilesInParallel
Win32
Only UNC shares should be missing trailing slashes.
MSBUILDDUMPPROCESSCOUNTERS
UseCodeMarkers
LogErrorFromResource
messageResourceName
If a log file name is set through the fileLoggerParameters
cbParams
AssemblyNameComparer
DirectoryGetFiles
IsSolutionFilename
Shared.KillingProcess
get_CurrentDirectory
CreateDirectory
GetLazyCollectionForLifetime
refCount
ThrowExceptionForHR
destinationItem
<!-- Windows 8.1 (Blue) and Server 2012 R2-->
ResponseFileNotFoundError
HandleConfigurationException
get_OverallResult
enableMSBuildDebugTracing
get_Exists
/dl:XMLLogger,MyLogger,Version=1.0.2,Culture=neutral
FactoryForDeserialization
get_IsConnected
EndsWith
version="3.5.0.0"
AccessedTime
5MSBUILD : error MSB1009: Project file does not exist.
set_EnableNodeReuse
GetXmlLineAndColumn
GetExtension
eventHandler
ShowTimestamp--Display the Timestamp as a prefix to any
continueOnError
We should not have to resize the buffer twice.
baseHandshake
System.Collections.IDictionary.GetEnumerator
System.Runtime.CompilerServices
dependsOnTargets
WriteTaskCommandLineEventToStream
GetFileNameWithoutExtension
;nodereuse=false
The same parameters listed for the console logger are
get_ColumnNumber
IndexOfAny
nTimerID
NotExpectedFunctionException
Microsoft
is provided that will be used instead.
FindOnPath
TaskCommandLineEvent
Visual Studio can be attached for you to debug the
get_Target
62LlL
Microsoft.Build.Engine
cancelComplete
MaxCharsBuffer
logfile=msbuild.log;
formatstring
System.Configuration
projectsExtensionsToIgnore
Default verbosity is Detailed.
3"3&3
get_CodePage
Gzp36
<>9__24_0
get_Column
GetChars
LogFile--path to the log file into which the
Shared.CannotConvertStringToBool
parentProcessId
keepDuplicateOutputs
buildWarningEventArgs
ReadInt64
HelpMessage_19_IgnoreProjectExtensionsSwitch
buffer
SetEnvironment
get_EndColumnNumber
SerializationFormatter
<Unrecognized solution version "{0}", attempting to continue.
startupFlags
get_BuildProcessEnvironment
/property:WarningLevel=2;OutDir=bin\Debug\
PROCESS_SET_QUOTA
parameter2
CompilationRelaxationsAttribute
Clone
taskLocation
toolsets
nodeEndpoint
HelpMessage_3_SwitchesHeader
Verbosity=diagnostic;Encoding=UTF-8
with the addition of the "/fileLoggerParameters" switch.
HelpMessage_15_ValidateSwitch
needToValidateProject
architectureA
Microsoft.Build.Logging.ConfigurableForwardingLogger
InternalErrorException
get_AsyncWaitHandle
allowEarlyCollection
get_CultureInfo
Verbosity--overrides the /verbosity setting for this
Queue`1
Microsoft.Build.Framework.ITaskItem2.SetMetadataValueLiteral
SolutionParseNoHeaderError
FromFileTimeUtc
get_BaseStream
whatIfHalved
WriteExternalProjectFinishedEventToStream
GetLastWin32Error
Solution file
160907175847Z
get_MemoryUseLimit
shutdownReason
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
ProcessValidateSwitch
loggerSwitchParameters
Legal_Policy_Statement
NextValue
filelogger4
The resource string must exist.
Long should be 8 bytes
GetIntegerVariableOrDefault
projectFile
showStackTrace
debugDumpPath
OnSchemaValidationError
Shared.ParameterCannotHaveZeroLength
<Module>
Handshake failed. Host user is {0} but we were created by {1}.
ProcessToolsVersionSwitch
J4=THJ$
get_File
PROCESSOR_ARCHITECTURE_INTEL
Use this logger to log events from MSBuild, attaching a
IInternable
HelpMessage_7_ResponseFile
Parameters to console logger. (Short form: /clp)
MSBuildLoadMicrosoftTargetsReadOnly
wProcessorRevision
__StaticArrayInitTypeSize=18
,/,I,W"e
ignore
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
GetProperty
EnsureTrailingSlash
taskException
jIm?%
get_Exception
Some command line switches were read from the auto-response file "{0}". To disable this file, use the "/noautoresponse" switch.
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
ArgumentNullException
SetParameterError
removeMetadata
[{10}]
EnqueuePacket
180807090642Z0#
nCipher NTS ESN:2665-4C3F-C5DE1+0)
taskType
BMSBUILD : error MSB1035: Specify the project extensions to ignore.
ReadOnlyEmptyCollection`1
^[\{0}\{1}][\{0}\{1}][^\{0}\{1}]+[\{0}\{1}][^\{0}\{1}]+
|5f*o
Microsoft Time-Stamp PCA 20100
LoggerFatalError
eventType
PROCESS_CREATE_PROCESS
HashSet`1
IsValidInputParameter
ToByte
dictionary
ErrorUtilities
StringSplitOptions
ResourceManager
Unexpected
isTaskExecuting
I0G0E
the console window. If the path to an output file
set_ForwardingLoggers
^[A-Za-z]:
pSize
$Microsoft Root Certificate Authority
{MSBUILD : error MSB1037: Specify one or more parameters for the console logger if using the /consoleLoggerParameters switch
RuntimeValuesMatch
Null strings not allowed.
InvalidProjectFile
AssemblyLoadInfoWithName
InvalidOperationException
and from where, and what they will contribute to
aBuff
CommunicationsUtilities
DllName
set_Loggers
savedEnvironment
PADPADP
AssemblyName
CreateUriFromPath
CompareBaseNameTo
valueName
TaskParameterType
loggerParameters
DirectoryExists
the console buffer
get_ProjectContextId
RuntimeFieldHandle
EndWaitForConnection
typeName1
AbortingBuild
RemoveMetadata
NotExpectedRegistryException
updateEnvironment
2MSB5019: The project file is malformed: "{0}". {1}
ClientConnectTimeout
get_Chars
exclude
destination
It should not be possible to specify more than 1 project at a time.
parentStartTime
msbuildRuntime
backing
comparisonFlags
PROCESS_TERMINATE
to the console. (Short form: /noconlog)
DisposeObjects
FileDescription
TranslateDictionary
MinValue
ProcessLdtInformation
set_FinalParameterValues
HelpMessage_1_Syntax
AssemblyDescriptionAttribute
Project
directory
IsValidOutputParameter
System.Security.AccessControl
MSBUILD : error MSB1015: MSBuild does not run on this version of the operating system. It is only supported on Windows 2000, Windows XP, and later versions.
dontCreate
xl\3|5n'
Missing resource '{0}'
CreateDomain
OldOMBuildProject
unescapedString
unquoteParameters
GetFriendlyCounterType
Microsoft Corporation1
HelpMessage_17_MaximumCPUSwitch
NumberStyles
useful for figuring out what files are being imported
taskRunnerThread
to separate multiple extensions.
get_NodeBuildEvent
taskName
MSBuild.Strings.shared.resources
Should have been logged
set_DefaultToolsVersion
X64CLR4
UnauthorizedAccess
ShowEventId--Show eventId for started events, finished
XmlReader
wf~(1
cacheOfReflectionOnlyLoadedTypesByFilterLock
TryIntern
includedResponseFiles
ThrowForUrl
get_TotalProcessorTime
TaskParameterTaskItem
kBuilding the projects in this solution one at a time. To enable parallel build, please add the "/m" switch.
parameter2Name
hasSTAThreadAttribute
Eliminated Strings*
dwTimeout
6__76
BeginWaitForConnection
z/Aq|]
Microsoft Time-Stamp PCA 2010
ArgumentException
ExternalProjectStartedEventArgs
GetBytes
fileSizeHigh
IsAssignableToITask
assemblyFile
A value with the same key is already in the collection.
VerifyThrowArgumentLengthIfNotNull
<>9__24_4
System.Xml.Schema
filelogger8
counter
M^M*V
OpportunisticIntern
Translate
InitializeRemappedFrom
RemoveAssemblyResolver
ProcessEnableAlignmentFaultFixup
GetSpecificFileLoggerParameters
parameter1
evaluate
AddAtom
lifetimeObjects
DebuggerEnabled
GetInterface
CoWaitForMultipleHandles
MSBUILDOLDOM
GetConsoleFallbackUICulture
GetNativeSystemInfo
1Wu56
FALSE
BuildRequestConfigurationResponse
exception
InternalDisconnect
detailed
PropertyName
lpMinimumApplicationAddress
7MSB5018: Failed to delete the temporary file "{0}". {1}
message
charsToEscape
GetParentProcessId
DistributedLoggerRecord
/fileLoggerParameters:LogFile=MyLog.log;Append;
NodeShutdownReason
Microsoft Corporation0
current working directory for a file that has a file
INodePacketHandler
LogMessageFromResource
get_AppDomainSetup
GatherResponseFileSwitch
<CharBuffer>k__BackingField
Condition
171002230052Z
(]W%#
Output
AssemblyResources
pattern
hMSB5003: Failed to create a temporary file. Temporary files folder is full or its path is incorrect. {0}
ContinueOnErrorValues
AfterTargets
BuildEngineResult
gatherStatistics
EndRead
strings
fileLoggerParameters
TMSB4008: A conflicting assembly for the task assembly "{0}" has been found at "{1}".
MSBuildArchitectureValues
PresentationBuildTasks
StringBuilder
ProjectLoadInfo
isParameterError
DllImportSearchPath
executablePath
GetEnvironmentCharArray
The presence of this switch implies the
other
kernel32Dll
Concat
ERROR_INSUFFICIENT_BUFFER
internHits
msbuildCodeOnly
timeout
WarnAndContinue
PickedUpSwitchesFromAutoResponse
get_LoadedAssembly
extensionToAdd
100701213655Z
ginormousHits
The available parameters are:
bufferLength
GetPathRoot
ResolveEventArgs
/validate Validate the project against the default schema. (Short
[<logger class>,]<logger assembly>[;<logger parameters>]
helpKeyword
({2},{3}):
IsAssignableFrom
BuildRequestConfiguration
format
attribute
BuildPropertyGroup
<Next>k__BackingField
System.Collections.ICollection.SyncRoot
Read7BitEncodedInt
MCx2O
get_IsSimpleName
get_ContinueOnError
write only
Client: rejected old host. Received byte {0} but this matched a byte to reject.
System.Collections.IEnumerator.Reset
{0} unexpectedly not a rooted path
set_SchemaFile
MSBUILDNODECONNECTIONTIMEOUT
ReadString
Active
AddToOrUpdateList
Shared.TaskResourcesNotRegistered
mergedRuntime
DeleteAtom
InvalidToolsetDefinitionException
I /help Display this usage message. (Short form: /? or /h)
computer. (Short form: /m[:n])
doubleQuotesRemovedFromArg
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
From calculating based on the memorystream, about to read n = {0}. length = {1}, rawPosition = {2}, readLength = {3}, stringLength = {4}, currPos = {5}.
get_ElapsedMilliseconds
taskOutputParameters
lZr4
keepEmptySplits
TranslateNullable
k%l%m.n1o2p2q2r3s5t?uBvFwFxFyFzF{F|F}F~F
If we have an exception message, the result type should be 'crashed' of some variety.
BuildEngineCallbacksInTaskHostUnsupported
VerifyThrowArgumentNull
BuildFinishedEventArgs
SetThreadErrorMode
AttemptToShortenPath
isDesiredType
get_CentralLogger
!\\\\\\\\(
Extension
ToArray
get_SenderName
wrappedParameter
BuildResult
InitPerformanceDll
We should have a project file if we're going to build.
remappedFrom
ComparePublicKeyToken
|---------------------------------------------------------------------------------|
BadImageFormatException
GetCurrentMSBuildArchitecture
SecurityAction
p /noautoresponse Do not auto-include any MSBuild.rsp files. (Short form:
innerException
preprocessWriter
fileSizeLow
InterningToString
HelpMessage_14_NoConsoleLoggerSwitch
end.
outputs
LoggerNotFoundError
get_IsEnabled
<PrivateImplementationDetails>
GatherParameterlessCommandLineSwitch
FileLogger8
SetSwitchError
Shared.KillingProcessByCancellation
create a log file for each node.
There is no point calling this method for less than two splits.
dontTrack
IFormatProvider
noconlog
E_ABORT
InvalidNodeNumberValue
CloneImmutable
FileInfo
\Performance
ftLastAccessTimeHigh
HelpMessage_18_DistributedLoggerSwitch
BinaryWriter
ParamArrayAttribute
parameters
We must have the type.
OutOfProcTaskAppDomainWrapperBase
MemberAccessException
Microsoft.Build.Collections
MTAThreadAttribute
ReportStatistics
List of extensions to ignore when determining which
L0J0H
INodePacket
Microsoft (R) Build Engine version {0}
MissingResponseFileError
COWAIT_FLAGS
get_Minor
OriginalFilename
Creates a single, aggregated project file by
FileLoggerParameters9
ProcessDefaultHardErrorMode
splitMarker
Why are we getting a TaskHostConfiguration packet while we're still executing a task?
YMSB5021: "{0}" and its child processes are being terminated in order to cancel the build.
GetHostHandshake
rMSB5005: Error parsing project section for project "{0}". The project file name "{1}" contains invalid characters.
Double
GetPathsHash
unquotedCommandLineArg
unloadProjectsOnCompletion
op_GreaterThanOrEqual
System.Collections
get_StartTime
.failure.txt
<>c__DisplayClass0_0
ReadOnlyEmptyList`1
IEnumerator
buildComplete
get_UnnamedAssembly
string matching (eg. 'true')
CC6R^
TextWriter
nLength
distributedFileLogger
get_Default
loggers
EndsWithSlash
Microsoft.Build.Shared
get_SystemDirectory
DELETE
dwDesiredAccess
Task runner for task
dwFlags
The name portion of the switch cannot contain more quoting than the arg itself.
a project file is not specified, MSBuild searches the
ProcessVerbositySwitch
capacity
decoder
CustomAttributeFormatException
GetFileType
Microsoft.Build.Logging.DistributedFileLogger
1MSBUILD : error MSB1012: Specify a response file.
Time Spent Interning
Object is immutable cannot replace the version
PROCESSOR_ARCHITECTURE_AMD64
DictionaryEntry
%MSB5010: No file format header found.
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
defaultVerbosity
Node shutting down with reason {0}.
escapedMetadata
DllNotFoundException
parameterNames
GetOEMCP
ReadEventFromStream
CloseHandle
heading
/maxcpucount[:n] Specifies the maximum number of concurrent processes to
appDomainLifetimeObjects
packetFactories
modifier
@.reloc
parameterlessSwitchesMap
READ_CONTROL
StringInternTarget
PROCESS_DUP_HANDLE
DateTimeKind
SerializationInfo
packetAvailable
enumerationComplete
System.Collections.ICollection.IsSynchronized
IsPartialTypeNameMatch
c.R+'
hugeMruSize
get_First
PipeSecurity
bbx2Q
Microsoft.Build.Engine,Version=4.0.0.0,Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a
z.9Wv
columnNumber
get_OSVersion
MissingNodeReuseParameterError
Build started.
OpenSubKey
remoting
MSBUILD : error MSB1020: The logger was not found. Check the following: 1.) The logger name specified is the same as the name of the logger class. 2.) The logger class is "public" and implements the Microsoft.Build.Framework.ILogger interface. 3.) The path to the logger assembly is correct, or the logger can be loaded using only the assembly name provided.
ProcessNodeReuseSwitch
GetParameterlessSwitchCommandLineArg
nmode
taskAppDomain
TranslateCulture
duplicateSwitchErrorMessage
LinkedListNode`1
ProcessDebugPort
BuildProjectFile
#Strings
LogCustomEvent
label
False--Nodes will not remain after the build completes
_CorExeMain
({2}-{7}):
AssemblyDelaySignAttribute
rejectionByteToReturn
MethodAccessException
ProcessLdtSize
GetTemporaryFile
190726201119Z0t1
WriteLongForHandshake
globalProperties
level="asInvoker"
UnhandledExceptionEventArgs
"msbuild[n].log". Events from all nodes are combined into
InvalidNodeReuseValue
System.Collections.IDictionary.Keys
uMSBUILD : error MSB1038: Specify one or more parameters for the file logger if using the /fileLoggerParameters switch
hObject
(Short form: /ds)
PipeOptions
@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
parameter1Name
ExitType
MissingIgnoreProjectExtensionsError
TargetFinishedEvent
ReadBuildWarningEventFromStream
RequiredPlatform
ginormous
pStrings
StartLocalNodeServer
get_LineNumberOfTaskNode
get_Reason
dwProcessorType
get_FileVersionHash
set_OnlyLogCriticalEvents
{0,20:N2}
LoggerFailurePrefixNoErrorCode
AltDirectorySeparatorChar
MSBuild MyApp.csproj /t:Clean
procName
.text
FileOrDirectoryExistsNoThrow
fileloggerparameters5
ReadInt32
PROCESS_CREATE_THREAD
parameterizedSwitchesMap
VerifyThrowInternalLength
110708205909Z
noautoresponse
Waiting for connection {0} ms...
<Encoding>k__BackingField
status
MSBuild.
handles
DistributedLogger
The <logger> syntax is:
*2r<J
FileLogger3
WIN32_FILE_ATTRIBUTE_DATA
projectFileName
get_CancelPending
get_ByteBuffer
MissingToolsVersionError
<>c__DisplayClass12_0
LogMessageEvent
pVersion
switch appends the build log to the log file;
get_Reader
Reacquire
The <logger assembly> syntax is:
System.Runtime.Remoting
MemoryLoad
*JrS`
Provides any extra parameters for file loggers.
get_Location
Dequeue
ReadByte
fileloggerparameters9
to the logger exactly as you typed them. (Short form: /l)
KeyValuePair`2
System.Security.Claims
NoAutoResponse
ProcessPropertySwitch
receivedCancel
hasLoadInSeparateAppDomainAttribute
TranslateArray
&*Fs^
Stopwatch
Identity
CodeMarkerEx
properties at the start of each project build.
/property:<n>=<v> Set or override these project-level properties. <n> is
Small Strings (>=
mismatchedEnvironmentValues
HasSTAThreadAttribute
5MSBUILD : MSB1046: The schema "{0}" is not valid. {1}
&MSBUILD : Configuration error {0}: {1}
VerifyThrowArgument
ReleaseHandle
msbuild.log
IList`1
Cannot get reader from writer.
/=aJcY
InvalidCastException
get_IsDummy
forwardingLoggerDescription
switch the distributed logger will use the fileName as a
TryRemove
lpPipeAttributes
CreateNewTaskItemFrom
PROCESSOR_ARCHITECTURE_ARM
Microsoft Corporation1#0!
HelpMessage_22_FileLoggerParametersSwitch
InvalidLoggerError
EnsureNoTrailingSlash
STD_OUTPUT_HANDLE
GetModuleFileName
stuff
HugeMruThreshhold
FileLoggerParameters1
AssemblyCompanyAttribute
<ReportStatistics>b__24_2
BuildStarted
IEnumerator`1
GetExplicitMSBuildRuntime
detailedsummary
targetFinishedTranslator
FullPath
INodePacketTranslatable
TaskHostTaskComplete
IEnumerable`1
fullPath
Microsoft Code Signing PCA0
GetExportedTypes
/noconsolelogger Disable the default console logger and do not log events
dMSBuild.Whidbey.Unittest, PublicKey=002400000480000094000000060200000024000052534131000400000100010007d1fa57c4aed9f0a32e84aa0faefd0de9e8fd6aec8f87fb03766c834c99921eb23be79ad9d5dcc1dd9ad236132102900b723cf980957fc4e177108fc607774f29e8320e92ea05ece4e821c0a5efe8f1645c4c0c93c1ab99285d622caa652c1dfad63d745d6f2de5f17e5eaf0fc4963d261c8a12436518206dc093344d5ad293
DebuggingSolutionFiles
^MSBUILD : error MSB1034: Node number is not valid. Value must be an integer greater than zero.
Not Supported LoggingEventType {0}
MSB4077: The "{0}" task has been marked with the attribute LoadInSeparateAppDomain, but does not derive from MarshalByRefObject. Check that the task derives from MarshalByRefObject or AppDomainIsolatedTask.
debug
BuildSubmission
largeMruSize
ContainsKey
get_Encoding
msbuildlocation=
MSBUILDLARGEINTERNTHRESHOLD
Replace
add_DomainUnload
DumpCounters
IAsyncResult
get_Unicode
Switches:
HelpMessage_27_DebuggerSwitch
HybridDictionary`2
HelpMessage_24_NodeReuse
the build. By default the output is written to
CompareExchange
ArgsReaderDelegate
<ReportStatistics>b__24_1
<application>
InvalidConfigurationFile
uintData
newMode
GetConfigurationBytes
get_CommandLineArg
architecture
HostServices
missedStrings
get_IsArray
displayName
callback
basePath
FactoryForTranslation
AssemblyLoadInfo
largeMruThreshhold
set_IsValidated
We must not have both the assembly name and the assembly file/path.
260708210909Z0~1
TaskParameter
get_EventType
nologo
MSBUILDDEBUGPATH
GetEquivalentCommandLineExceptProjectFile
BeforeTargets
AddAccessRule
get_TaskResult
GetAssemblyNameFromDisplayName
/pp:out.txt
noautorsp
currentInstance
registryView
(Short form: /nr)
TranslateITaskItemArray
System.Xml
newStatus
',b8A
PlatformID
ComVisibleAttribute
the file is in the current directory and named
separately.
SolutionParseNestedProjectError
WriteBuildErrorEventToStream
SetMetadata
MulticastDelegate
dwlength
WrapNonExceptionThrows
CreateLogger
1Jv1=+r
distributedLoggerSwitchParameters
ginormousMisses
We must have either the assembly name or the assembly file/path.
ScanAssemblyForPublicTypes
MSBuildApp
unquote
/target:Resources;Compile
msbuildLogFileName
ThrowInternalError
DumpAllInCategory
SolutionParseWebProjectPropertiesError
get_ProjectFileOfTask
"{0}" is not a valid item-spec modifier.
get_Success
ReadUInt16
INodeEndpoint
FILE_ATTRIBUTE_READONLY
get_CurrentExecutableConfigurationFilePath
CrashedAfterExecution
MSBuild.rsp
HResultFailed
ShowCommandLine--Show TaskCommandLineEvent messages
semicolon or a comma to separate multiple properties, or
.log;
SolutionParseNestedProjectUndefinedError
StringBuilderToString
get_CurrentExecutableDirectory
!Attempting to cancel the build...
InternableToString
parameterizedSwitch
EscapeCarriageReturn
get_Assembly
Count = 0
)MSB5013: Error parsing a project section.
UnescapeAll
PADPADPy
VerifyThrowSupportedOS
Microsoft.Build.BuildEngine
PROCESSOR_ARCHITECTURE_IA64
Disabled
UnsupportedOS
ToUpperInvariant
ResolveEventHandler
taskCancelledEvent
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
UTF8Encoding
get_CounterType
taskParameter
get_TaskLocation
LoadLibrary
<>9__24_1
ProcessAffinityMask
GetMetadata
dwDirectory
metadataName
MSBUILD : error MSB1027: The /noautoresponse switch cannot be specified in the MSBuild.rsp auto-response file, nor in any response file that is referenced by the auto-response file.
X64CLR2
Cdb4
lightUpRegistryKey
BuildResultCode
The specified key was not found in the collection.
different logger instance to each node. To specify
fileloggerparameters6
MSBUILDDEBUGGING
ReflectionOnlyLoad
SetUnexpectedParametersError
targetOutputsPerProject
MethodInfo
GetCategories
FormatEventMessage
TryGet
set_Result
SingleDictionaryEntryEnumerator
LogWarningEvent
;MSBUILD : error MSB1008: Only one project can be specified.
Ginormous Strings MRU Size
StringArray
Logs the build output to multiple log files, one log file
PipeTransmissionMode
DISABLEMPLOGGING
ProjectSchemaErrorHalt
NamedPipeServerStream
WindowsBuiltInRole
<TaskException>k__BackingField
set_BuildEngine
4MSB5020: Could not load the project file: "{0}". {1}
GetTaskHostHostHandshake
({2},{3},{7},{8}):
ModifyingTaskHostEnvironmentVariable
GetCustomAttributes
NodePacketReadTranslator
get_SpecialKey
extensionsToIgnoreDictionary
get_MaxNodeCount
unused
parameterizedSwitches
numBufferChars
InternalConstruct
FileLogger4
PathTooLongException
Convert
Switch: {0}
get_ProcessorCount
6MSBUILD : error MSB1018: Verbosity level is not valid.
d]\(1
finalParams
fileloggerparameters1
Handshake failed. Received {0} from host not {1}. Probably the host is a different MSBuild build.
The double-quote character is not supported as a separator.
per MSBuild node. The initial location for these files is
store
5MSBUILD : error MSB1016: Specify the verbosity level.
Lock should already have been taken
lockObject
GetResourceString
fileVersionHash
ProcessPooledUsageAndLimits
exceptionFromExecution
fileInfoLevel
get_Out
Capture
add_UnhandledException
FileLogger2
System.Core
internMisses
typeName
firstArgument
MissingLoggerError
WaitAny
PROCESS_SET_INFORMATION
%{0:x00}
</application>
get_CurrentExecutableName
HelpMessage_16_Examples
get_EscapedCodeBase
<Column>k__BackingField
LogWarningFromResource
InternStringIfPossible
publicTypeNameToType
noConsoleLogger
OutOfProcTaskHostNode
NumberOfParameterizedSwitches
HResultSucceeded
InvalidMaxCPUCountValue
LoadProject
get_ANSICodePage
CreatedTime
InvalidMaxCPUCountValueOutsideRange
LegalCopyright
Description: Builds the specified targets in the project file. If
AssemblyDefaultAliasAttribute
GetShortFilePath
ParameterizedThreadStart
NoSummary--Don't show error and warning summary at the
TranslateEnum
property
HasExtension
get_UtcNow
Shared.ParametersMustHaveTheSameLength
taskCompleteEvent
get_ToolsPath
MSBUILDDIRECTORYDELETERETRYCOUNT
ug!2<
dt+`C
endLineNumber
cache
CMSB5009: Error parsing the nested project section in solution file.
EventWaitHandle
\MSBuild.Unittest, PublicKey=002400000480000094000000060200000024000052534131000400000100010007d1fa57c4aed9f0a32e84aa0faefd0de9e8fd6aec8f87fb03766c834c99921eb23be79ad9d5dcc1dd9ad236132102900b723cf980957fc4e177108fc607774f29e8320e92ea05ece4e821c0a5efe8f1645c4c0c93c1ab99285d622caa652c1dfad63d745d6f2de5f17e5eaf0fc4963d261c8a12436518206dc093344d5ad293
InvalidTaskAttributeError
,.,@,
2MSB4025: The project file could not be loaded. {0}
MSBUILDLARGEINTERNSIZE
waitAll
Microsoft.Build.Framework.ITaskItem2.get_EvaluatedIncludeEscaped
taskAssemblyFileToResolve
Using35Engine
M0K0I
Shared.TaskResourceNotFound
#Blob
FILE_ATTRIBUTE_REPARSE_POINT
IDictionary
Examples:
ConsoleSpecialKey
OutOfProcTaskAppDomainWrapper
ExtractAnyParameterValue
System.Collections.IDictionary.IsReadOnly
GetChildProcessIds
lifetime
noconsolelogger
IsMatch
4.7.3190.0
MSBUILD : error MSB1011: Specify which project or solution file to use because this folder contains more than one project or solution file.
System.Text.RegularExpressions
({1} instances x each {2} chars = {3}KB wasted)
STANDARD_RIGHTS_ALL
Registry
StreamingContext
OnDeserialized
yyyy'-'MM'-'dd HH':'mm':'ss'.'fffffff
GetRequestedRuntimeInfo
`.rsrc
RUNTIME_INFO_DONT_SHOW_ERROR_DIALOG
AssemblyNameFlags
DuplicateProjectSwitchError
SetParameterizedSwitch
style even when running in non-multiprocessor
.tq[m
eDesiredAccess
<MSBUILD : error MSB1039: Specify the version of the toolset.
DebuggerHiddenAttribute
INodePacketTranslator
add_OnLinkStatusChanged
MAX_PATH
ProcessLoggerSwitch
Process ID
Unreachable?
{0} unexpectedly null
{0} ({1},{2})
Intern Misses
TranslationDirection
/noautorsp)
loadedAssembly
Final buffer capacity should be sufficient for full path name and null terminator.
({2}-{7},{3}):
E0C1)0'
non-multiprocessor mode.
Guid should be unique
CleanupTask
ClaimsIdentity
We should never have a null configuration when we're trying to log warnings!
RPC_S_CALLPENDING
hkey_local_machine
value
Changing link status from {0} to {1}
KeepMetadata
get_CategoryName
HelpMessage_13_ConsoleLoggerParametersSwitch
/fileLogger[n] Logs the build output to a file. By default
CompareBaseNamesStringWise
ToInt64
taskParams
FileLoggerParameters2
AssemblyInfoToLoadedTypes
Microsoft.Build
LoggingEventType
*?*kXIc
MSBUILDTASKHOSTABORTTASKONCANCEL
ProcessWorkingSetWatch
ICollection
Directory
MSBUILDDONOTLAUNCHDEBUGGER
DDBLD438
FileDelete
(1) the directory of msbuild.exe
Microsoft Time-Stamp PCA
IsPathRooted
get_CharBuffer
ListDictionaryEntryEnumerator`2
buildProcessEnvironment
SolutionParseInvalidProjectSolutionConfigurationEntry
tableOfItemSpecModifiers
DetectedParameterizedSwitch
lpBuffer
lastBufferSizeNeeded
Interlocked
StackOverflowException
Comments
comparer
ErrorAndStop
5MSB4103: "{0}" is not a valid logger verbosity level.
MSBuildTaskHostUpdateEnvironmentAndLog
filelogger
prepareForReuse
HandleInheritability
normal
ThreadErrorModeMinOsVersion
taskColumn
ArgsWriterDelegate
UriKind
L&*H$_Z
get_Kind
MSBuild_CommTrace_PID_{0}
ReadResponseFileError
get_Dummy
taskAppDomain (in-proc)
mode. This logging style is on by default.
Client connection failed. Exiting comm thread. {0}
reason
get_TaskOutputParameters
ErrorsOnly--Show only errors.
ObjectDisposedException
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
NeutralResourcesLanguageAttribute
WriteBuildWarningEventToStream
distributedfilelogger
WriteITaskItem
TaskInstantiationFailureError
.cctor
milliseconds
lpNumberOfBytesRead
Microsoft.Internal.Performance
/flp2:errorsonly;logfile=msbuild.err
DataReceivedDelegate
get_DefaultBuildManager
TargetStartedEvent
bInheritHandle
Filename
SetErrorMode
Shared.FailedCreatingTempFile
/fileloggerparameters[n]:<parameters>
set_Value
MissingMaxCPUCountError
SolutionParseInvalidProjectFileNameEmpty
UnhandledExceptionEventHandler
MSBuild_NodeShutdown_{0}.txt
Runtime
taskResult
taskExceptionMessageArgs
System.Collections.IDictionary.get_Values
bytes
VerifyThrowInternalRooted
7MSBUILD : error MSB1040: ToolsVersion is not valid. {0}
ExpectedEventToBeSerializable
TargetException
CreatePipe
regRoot
Returns
get_IsMarshalByRef
WRITE_OWNER
8MSBUILD : error MSB1028: The logger failed unexpectedly.
10 file loggers to be attached. (Short form: /fl[n])
UnloadProject
/consoleloggerparameters:PerformanceSummary;NoSummary;
toolsVersion
||{0,50}|{1}|{2,8}|
DisplayCopyrightMessage
Write
PROCESS_BASIC_INFORMATION
GetFullPath
ReadExternalProjectFinishedEventFromStream
o:q+-
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
stringWithCarriageReturn
Append--determines if the build log will be appended
parametersToAggregate
RequiredRuntime
Assembly file path should be rooted
NyP)V
get_PeakPagedMemorySize64
/logger:<logger> Use this logger to log events from MSBuild. To specify
set_Encoding
AppendLine
get_ReadOperation
set_ByteBuffer
set_XmlResolver
UnknownSwitchError
CopyMetadataTo
AOC1&0$
{0}\software\microsoft\msbuild\4.0
Need item-spec to modify.
System.Collections.IDictionary.Remove
ExtensionToAdd is not immutable
.3r<>
`Ge`@N
SendBuildEvent
past end
Encoding--specifies the encoding for the file,
@<file> Insert command-line settings from a text file. To specify
CThe item metadata "%({0})" cannot be applied to the path "{1}". {2}
)Microsoft Root Certificate Authority 20110
Must pass an enum type.
waitId {0} out of range.
dictionaryCreator
taskFile
MSB5023: Error parsing the nested project section in solution file. A project with the GUID "{0}" is listed as being nested under project "{1}", but does not exist in the solution.
T~M*V
NodePacketDictionaryCreator`1
get_Id
ProcessAccessToken
Activator
EnableMPLogging--Enable the multiprocessor logging
get_Version
DefaultMemberAttribute
taskCommandLineEventArgs
InvalidToolsVersionError
refCount should not be less than 1.
CreateText
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
MSBuild.Strings.shared
Connect() not valid on the out of proc endpoint.
WqVNHE
nBufferLength
InvalidVerbosity
packet
PROCESS_VM_OPERATION
Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z
\\?\globalroot
MSBUILDDEBUGCOMM
Disconnecting voluntarily
SecurityPermissionAttribute
hostContext
set_MaxNodeCount
get_Size
:MSBUILD : error MSB1005: Specify a property and its value.
System.Text
packetQueue
projectFileOfTask
lineNumberOfTask
UnsafeLoadFrom
immutable
cpuCount
VerifyThrowArgumentLength
wProcessorLevel
get_CurrentDomain
QuotingUtilities
CheckForHardcodedSTARequirement
<>4__this
build with. If the switch is not used, the default
SHOWPROJECTFILE=TRUE;
NoItemAndPropertyList--Don't show list of items and
SchemaNotFoundError
EqualsImpl
get_Platform
columnNumberOfTask
HelpMessage_21_DistributedFileLoggerSwitch
BuildFinishedEvent
the property name, and <v> is the property value. Use a
get_InitializationException
GatherAllSwitches
BuildMessageEventArgs
PipeAccessRule
InstantiateAndExecuteTaskInSTAThread
DateTime
Microsoft.Build.Exceptions
CodeMarkerExStartEnd
lpSystemInfo
CommandLineSwitchException
Ginormous Chars Saved
o:x+/
escapedItemSpec
diagnostic
get_ColumnNumberOfTask
SplitUnquoted() must return at least one string, and no more than two.
Opportunistic Intern (
Summary--Show error and warning summary at the end.
Parent started connecting. Reading handshake from parent
UnregisterPacketHandler
We should never get an empty string passed to this method
ERROR_FILE_NOT_FOUND
FreeEnvironmentStrings
ShowHelpPrompt
op_Subtraction
SetApartmentState
StreamReader
stopwatch
Microsoft.Build.Framework.ITaskItem2.CloneCustomMetadataEscaped
NeedJustMyCode
whatIfZero
YMSB5006: Error parsing project section for project "{0}". The project file name is empty.
count
WriteAllText
CloneForWriteIfNecessary
PROFILE_DATA
GetDirectoryName
We should never have a null configuration when we're trying to log messages!
UninitializePerformanceDLL
Execute
GetLongFilePath
get_CurrentThread
$`2X`F
if Halved
The <logger parameters> are optional, and are passed
/dl:MyLogger,C:\My.dll*ForwardingLogger,C:\Logger.dll
currentDirectory
rejectedStrings
autoResponseFileName
Ending read loop
readMethodCache
schemaFile
IBuildEngine
Cannot call this method when writing!
bytes)
writeMethodCache
for example, UTF-8, Unicode, or ASCII
AParameters "{0}" and "{1}" must have the same number of elements.
HelpMessage_26_DetailedSummarySwitch
a5a866e1ee186f807668209f3b11236ace5e21f117803a3143abb126dd035d7d2f876b6938aaf2ee3414d5420d753621400db44a49c486ce134300a2106adb6bdb433590fef8ad5c43cba82290dc49530effd86523d9483c00f458af46890036b0e2c61d077d7fbac467a506eba29e467a87198b053c749aa2a4d2840c784e6d
ReplaceVersion
messageResource
nodeId
AmbiguousProjectError#
set_CurrentUICulture
get_ToolsVersion
multipleParametersAllowed
DumpCounter
LargeMruThreshhold
IsMetaprojectFilename
msbuildVersion
ReadLine
runtimeB
(,01a
NodePacketValueFactory`1
InitializeAsyncPacketThread
TaskStartedEventArgs
NTDLL.DLL
8.M*V
MSBUILD : error MSB1013: The response file was specified twice. A response file can be specified only once. Any files named "msbuild.rsp" in the directory of MSBuild.exe or in the directory of the first project or solution built (which if no project or solution is specified is the current working directory) were automatically used as response files.
Estimated Eliminated Bytes
FreeLibrary
Large Strings MRU Size
Legal_policy_statement
(Parameter "{0}" cannot have zero length.
IsNonBatchingTargetAttribute
Exception while deserializing packet {0}: {1}
@.0+:
FILE_TYPE_CHAR
preprocess
S0Q0O
Received {0} from CoWaitForMultipleHandles, but expected 0 (S_OK)
ICollection`1
FormatResourceString
taskWrapper
propertyValueSeparator
ProcessCommandLineSwitches
ExtractAnyLoggerParameter
handler
errorAndContinue
get_Ticks
TryCreate
messageResourceNameValue
CompanyName
ExtensionAttribute
NativeMethods
CreateInstanceFromAndUnwrap
PartialNameCompare
toolsversion
set_IsBackground
set_Position
AvailablePageFile
PipeDirection
Microsoft Code Signing PCA 20110
FindAtom
get_Writer
xbx2M
*.*proj
MSBUILD : error MSB1048: Solution files cannot be debugged directly. Run MSBuild first with an environment variable MSBUILDEMITSOLUTION=1 to create a corresponding ".sln.metaproj" file. Then debug that.
Release
set_TaskException
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
for all logging messages.
/preprocess[:file]
HaveAnySwitchesBeenSet
ginormousSize
System.Collections.ICollection.Count
comma to separate multiple targets, or specify each
ValidationEventArgs
ProjectNotFoundError
get_WrappedParameter
<Line>k__BackingField
cHandles
[<partial or full namespace>.]<logger class name>
<InstantiateAndExecuteTaskInSTAThread>b__0
fileVersionChecked
Sleep
LogDebugCommunications
Exception while serializing packets: {0}
asString
Ginormous (>=
BuildStringFromResource
SaveLogicalProject
<ReportStatistics>b__24_0
set_UseSynchronousLogging
CurrentRuntime
LogMessage
sender
Huge Strings (>=
4MSBUILD : error MSB1026: Schema file does not exist.
=t]o-
210403130309Z0w1
lpOverlapped
MemberInfo
StreamWriter
GetCacheDirectory
PROCESS_QUERY_INFORMATION
Ginormous Misses
set_Line
ThrowErrors
GetMemoryStatus
GetFileAttributesEx
<.cctor>b__2_0
GetFullPathNoThrow
Microsoft Operations Puerto Rico1
typeNameToType
RootDir
)Microsoft Root Certificate Authority 20100
switchesToAppend
get_Schemas
extension that ends in "proj" and uses that file.
isOutOfProc
target separately. (Short form: /t)
ProcessPreprocessSwitch
CompilerGeneratedAttribute
Shared.ProjectFileCouldNotBeLoaded
MissingProject
returns
ThreadPool
WAIT_TIMEOUT
UUZUUZ
##########Top Rejected Strings:
AnyCPU
)`'v4$
get_TaskExceptionMessageArgs
T5fgr|
OutputAttribute
HelpMessage_25_PreprocessSwitch
currentRuntime
Microsoft Code Signing PCA
PROCESS_ALL_ACCESS
NodePacketWriteTranslator
packetFactory
* Even for MRU size of zero there will still be some intern hits because of the tiny
mscoreeDLL
get_Next
XmlTextReader
CurrentArchitecture
TaskName
cacheOfLoadedTypesByFilterLock
distributedlogger
{0} (TID {1}) {2,15} +{3,10}ms: {4}
ignoreprojectextensions
{0}{0}
System.Collections.Concurrent
DMicrosoft.Build.Collections.ReadOnlyEmptyList`1+<GetEnumerator>d__17
fileLine
get_NewLine
nStdHandle
XMSBUILD : error MSB1024: Only one schema can be specified for validation of the project.
default
SafeProcessHandle
GetBaseHandshakeForContext
/verbosity:quiet
WindowsIdentity
WAIT_ABANDONED_0
HelpMessage_8_NoAutoResponseSwitch
IBuildEngine3
BuildStartedEventArgs
ThrowInternalErrorUnreachable
get_LocalPath
.metaproj
`H-)V
GetElementType
AssemblyInformationalVersionAttribute
GetExecutingAssembly
get_WriteOperation
*MSBUILD : error MSB1007: Specify a logger.
Listen
OutOfProc Endpoint Packet Pump
get_Key
itemSpec
MSBuild.Strings
Rc;5u
ReflectionTypeLoadException
System.Collections.ICollection.CopyTo
GetDirectoryNameOfFullPath
get_Last
set_DetailedSummary
DisabledViaRegistryCheck
StringBuilderInternTarget
exceptionMessageArgs
HaveErrors
typeName2
IsParameterlessSwitchSet
parameterName
RemoveAt
DirectoryNotFound
Attempting to change status to existing status {0}.
GetDirectory
MSBUILD : error MSB4192: The project file "{0}" is in the ".vcproj" or ".dsp" file format, which MSBuild cannot build directly. Please convert the project by opening it in the Visual Studio IDE or running the conversion tool, or, for ".vcproj", use MSBuild to build the solution file containing the project instead.
|hK,_
FileCreate
ThrowIfTypeDoesNotImplementToString
SchemaNotFoundErrorWithFile
a single log. The location of the file and other
List`1
<>1__state
MemoryStream
EqualsIgnoreVersion
stringData
get_Comparer
resolver
stringToHash
GetFullPathName
Microsoft.Build.Internal
8MSB5004: The solution file has two projects named "{0}".
/nodeReuse:<parameters>
packetType
ConfigurationFailurePrefixNoErrorCode
ReferenceEquals
valueFactory
[#D35
QEX82q'
WaitForMultipleObjects
WaitForPipeDrain
DefaultTargets
Entering read loop.
RegisteredTaskObjectLifetime
DisabledDueToDllImportException
chars
/tv)
get_Succeeded
ValueCollection
(Short form /dl)
MaxPath
Any response files named "msbuild.rsp" are automatically
OutOfProcTaskHostTaskResult
fileEndLine
There should be some extensions to Ignore
UnrecognizedSolutionComment
include
System.ComponentModel
buildEngine
get_Message
RaiseLinkStatusChanged
TaskLoader
SetErrorMode_VistaAndOlder
ProjectSchemaValidationHandler
FileUtilitiesRegex
SolutionParseDuplicateProject
dwProcessId
InvalidVerbosityError
taskParameters
RemoveLast
X]ZX*
logFile=
OpenProcess
250701214655Z0|1
SchemaFileLocation
clientHandshake
UnverifiableCodeAttribute
Past end of enumeration
UnhandledExceptionHandler
oldMode
fileloggerparameters3
</trustInfo>
ProcessDistributedLoggerSwitch
SetConfigurationBytes
defaultValue
ReadExternalProjectStartedEventFromStream
FrameworkLocationHelper.UnsupportedFrameworkVersion
ProcessUserModeIOPL
MarkImmutable
wildcards
GetTempPath
RegisterTaskObject
The string must exist.
isParameterErrorValue
AmbiguousProjectError
K /version Display version information only. (Short form: /ver)
MSBuildRuntimeValues
040904B0
NotExpectedSerializationException
TrimStart
RegisterLogger
get_SessionId
MarshalByRefObject
6+0@YHF
ContainsEscapedWildcards
op_GreaterThan
AssemblyFile
f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb
internEliminatedChars
GetRegisteredTaskObject
FileLoggerParameters3
||{0,50}|{1,20:N0}|{2,8}|
switchesFromAutoResponseFile
cacheOfReflectionOnlyLoadedTypesByFilter
ulongData
get_ManagedThreadId
get_ProjectFile
InvalidPropertyError
<ByteBuffer>k__BackingField
180907175847Z0
errorMessage
context
ProcessVmCounters
TaskFactory
uV%xg
UriFormatException
ftLastWriteTimeLow
environment
n[ormal], d[etailed], and diag[nostic]. (Short form: /v)
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
PipeStream
<requestedPrivileges>
buildEvent
Shared.InvalidProjectFile
CompareCulture
CreateSharedBuffer
filelogger6
FileLoggerParameters7
{0,20:N0}
get_Value
SetConsoleUI
System.Runtime.Serialization
.proj
Intern Rejects (as shorter than
HasSameBacking
GetFileLoggerParameters
ReadFile
commandLineArg
HelpMessage_11_LoggerSwitch
IsSpecialTaskAttribute
DebuggerDisplayAttribute
BindingFlags
Microsoft Corporation1!0
EMSBUILD : error MSB1021: Cannot create an instance of the logger. {0}
InvalidFilterCriteriaException
processIdTokill
MissingFileLoggerParameterError
VarFileInfo
STARTUP_LOADER_SAFEMODE
NodeEndpointOutOfProcBase
AsyncCallback
SYSTEM_INFO
EnableStatisticsGathering
CharArrayToString
BuildError
GetHexHash
get_UICulture
True --Nodes will remain after the build completes
CloneCustomMetadata
ProcessMaxCPUCountSwitch
GinormousThreshhold
MaxCPUCount
<>2__current
LoggerVerbosity
DebuggableAttribute
SharedReadBuffer
HelpMessage_10_PropertySwitch
hugeMruThreshhold
ComparePublicKeyTokens
loadedType
get_RemappedFromEnumerator
ConsoleCancelEventArgs
H0F0D
ParseLoggingParameter
Eliminated Chars
SolutionParseProjectEofError
get_PrepareForReuse
(&)-*.,0.3152G3S4X5d?kLpMsPxQ{S~Y
JMicrosoft.Build.Collections.ReadOnlyEmptyCollection`1+<GetEnumerator>d__17
AssignViaEnvironment
doubleQuotesRemoved
<GetEnumerator>d__17
events, and messages
Not setting the switch overwrites the
System.Collections.IDictionary.IsFixedSize
Label
get_ThreadId
;MSBUILD : error MSB1023: Cannot read the response file. {0}
typeFilter
From getting the length out of BaseStream.Read directly, about to read n = {0}. readLength = {1}, stringLength = {2}, currPos = {3}
ProcessorArchitecture
keepDuplicates
System.Collections.ICollection.get_SyncRoot
logger
ProcessProjectSwitch
get_Loggers
wProcessorArchitecture
IDisposable
wrappedItem
}}Y}Y}Y}Y}Y}YY}YYYYUYYUYUY}
FileLogger9
TaskStartedEvent
microsoft1-0+
DeleteDirectoryNoThrow
GetLoadedTypeByTypeName
<>9__24_2
input
System.Security.Permissions
[zi4
W#:-I
Q".r+v
Cannot get writer from reader.
Root directory must have a trailing slash.
BuildErrorEventArgs
reader
NormalizePath
add_CancelKeyPress
<Result>k__BackingField
Microsoft.Build.Framework.ITaskItem2.GetMetadataValueEscaped
get_Entry
TrimEnd
module
"n" if present can be a digit from 1-9, allowing up to
maxcpucount
HelpMessage_23_ToolsVersionSwitch
AddFirst
MSBUILDDEBUGONSTART
BuildAborted
<security>
eventArg
AvailablePhysical
MSBuildVersion
TryGetValue
arrayIndex
We must have the assembly the type was loaded from.
the addition of the "/fileLoggerParameters[n]" switch.
trace
MessageImportance
$8G/>
taskRunnerFinished
TotalPhysical
InvalidNodeNumberValueIsNegative
ConcurrentDictionary`2
Shared.InvalidFilespecForTransform
*MSBuild is expecting a valid "{0}" object.
MultipleSchemasError
AssemblyProductAttribute
FileLoggerParameters4
ProjectCollection
ProcessIoCounters
AvailableVirtual
ProcessDistributedFileLogger
pipeServer
FormatString
SecurityAttributes
TypeInitializationException
get_OffsetToStringData
recursive
get_FinalParameterValues
leadingBytesToReject
FlagsAttribute
;Syntax: MSBuild.exe [options] [project file]
get_CommandLine
<MSB5016: The name "{0}" contains an invalid character "{1}".
RecursiveDir
SchemaValidationError
Should not get to the default of GetBuildEventArgFromId ID:
TranslateITaskItem
Split
method
ReadLongForHandshake
filelogger9
searchPattern
Large Estimated Bytes Held
FileLoggerParameters5
wrappedTask
logError
TValue
IsParameterlessSwitch
Flavor=Retail
inlining all the files that would be imported during a
IteratorStateMachineAttribute
/flp:Summary;Verbosity=minimal;LogFile=msbuild.sum
ResourceUtilities
<?xml version="1.0" encoding="utf-8"?>
asAssemblyName
OnDeserializedAttribute
version
ProcessPriorityClass
HelpMessage_9_TargetSwitch
ObjectSecurity
get_SubmissionId
strRegRoot
Microsoft Corporation. All rights reserved.
the current directory. By default the files are called
HandlePacket
System.Linq
PipeBufferSize
extension
GetStdHandle
INFINITE
NumberOfParameterlessSwitches
get_TaskName
innerExceptionValue
metadataValue
GetObjectData
buildLifetimeObjects
set_ExceptionMessage
maxSplits
FileNotFoundException
taskAppDomain (out-of-proc)
CopyOnWriteDictionary`2
kIx:T
ExtractMessageCode
Microsoft Corporation1200
to or overwrite the log file. Setting the
Microsoft Code Signing PCA 2011
Microsoft.Build.xsd
Microsoft.Build.BackEnd.Logging
IEqualityComparer`1
ValidateExtensions
instance
nTu55
MakeRelativeUri
Washington1
@MSBUILD : error MSB1047: File to preprocess to is not valid. {0}
System.Collections.Generic.IEnumerator<T>.Current
byteArray
lpSecurityDescriptor
ProcessExceptionPort
runtimeInfoFlags
Debug
/flp1:warningsonly;logfile=msbuild.wrn
assembly
HelpMessage_4_HelpSwitch
allowedExtensions
EThe string "{0}" cannot be converted to a boolean (true/false) value.
get_TotalMilliseconds
/fileloggerparameters is also used by any distributed
This collection is read-only.
6)Z)V
SmallMruSize
remove
oIoX]i*
NameInvalid
cacheOfLoadedTypesByFilter
if Infinite
StartLocalNode
get_Retargetable
get_Importance
ParameterizedSwitchInfo
enumerator
get_AssemblyName
Inputs
importance
asString2
MSBUILD : error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file.
unnamedAssembly
Inactive
IgnoreProjectExtensions
initializeOnly
GetMaxByteCount
#GUID
interned
dwDirectoryLength
http://microsoft.com0
Peak Paged Memory
Should always have an explicit architecture when we call this method.
You do not have access to: {0}
InternalLoggerException
ToInt32
R0P0N
_node_
lightUpKey
fileColumn
GetLoadedType
uiCulture
filelogger5
PartialComparisonFlags
ResolveAssemblyReference
PerformanceCounterCategory
MSBuild.exe
consumed from the following locations:
Copyright (C) Microsoft Corporation. All rights reserved.
centralLogger
get_AssemblyFile
20180807090644.652Z0
endColumnNumber
LogErrorEvent
.NET Framework
GetParameterizedSwitchCommandLineArg
AssemblyLoadInfoWithFile
parameterSeparators
get_Instance
ThreadInterruptedException
Enables or Disables the reuse of MSBuild nodes.
asString1
Architecture
TaskCommandLineEventArgs
DisposeCacheObjects
GetDirectories
Enqueue
ProcessBasicInformation
GetItemSpecModifier
DebuggingModes
taskCompletePacket
/detailedsummary
message.
misses
Microsoft.Build.Framework.ITaskItem2.EvaluatedIncludeEscaped
warning
ConsiderDebuggerLaunch
IsValidMSBuildArchitectureValue
customEscapedMetadata
StringComparer
set_Parameters
UnregisterTaskObject
Shows detailed information at the end of the build
BuildParameters
InitializeArray
taskHostParameters
==============
threadId
Include
LoggerFailurePrefixWithErrorCode
anyPrefixingParameter
get_InnerException
/validate:<schema> Validate the project against the specified schema. (Short
MissingFieldException
COMPLUS_INSTALLROOT
ginormousThreshhold
7MSBUILD : error MSB1033: Node number is not valid. {0}.
Microsoft.Build.Logging
TranslateDotNet
separator
System.Collections.IDictionary.Add
HandleNodeBuildComplete
MissingTargetError
Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
StringFileInfo
TargetFinishedEventArgs
Where
9!0f6
get_OutputEncoding
ReadITaskItem
hasProcessorArchitectureInFusionName
ole32.dll
debugger
set_MemoryUseLimit
AmbiguousMatchException
IsIoRelatedException
cacheLock
8ef*V
clientIdentity
0.>+T
exePath
MoveNext
dumpFileName
AccessViolationException
ConsoleCancelEventHandler
escapingWasNecessary
get_ItemSpec
RtlMoveMemory
'For switch syntax, type "MSBuild /help"
taskFactory
get_HasProcessorArchitectureInFusionName
get_TaskId
RelativeDir
(Short form: /flp[n])
get_Ordinal
inputs
unquotedParameter
QueueUserWorkItem
StringComparison
VerifyThrowArgumentOutOfRange
ProjectStartedEvent
OM_NotSupportedReadOnlyCollection
wReserved
get_ErrorCode
get_IsAbsoluteUri
get_ExceptionObject
uiAccess="false"/>
BMSBUILD : error MSB1002: This switch does not take any parameters.
NodePacketType
fullpath
initialTargets
HelpPrompt
index
InvalidSwitchIndicator
ProcessQuotaLimits
dwPageSize
startupDirectory
-%r55
IOrderedEnumerable`1
IsLittleEndian
get_SafeWaitHandle
ThrowInvalidToolsVersionInitializationException
Example:
get_PrivilegedProcessorTime
MSBUILDLOADALLFILESASWRITEABLE
KeyCollection
ToObject
Peak Working Set
<requestedExecutionLevel
GetExplicitMSBuildArchitecture
dX<ut
Huge Estimated Bytes Held
SetCurrentDirectory
We must be able to extract the switch parameters.
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
NullHandleRef
fileloggerparameters7
DirectoryInfo
CompareBaseNameToImpl
System.Collections.IDictionary.set_Item
FileLocation
set_Target
OpenBaseKey
GetEnvironmentVariables
RunTask
copyFrom
output
100831221932Z
FileLoggerParameters8
pipeName
get_WrappedTask
8MSBUILD : error MSB1004: Specify the name of the target.
MSBUILDHUGEINTERNSIZE
FatalError
Ij1..
IsDerivableItemSpecModifier
get_AssemblyLocation
get_CurrentCulture
CreateInstance
ThreadPoolExtensions
ToByteArray
XmlSyntaxException
get_Line
resourceName
SingleEnumerator
Causes a debugger prompt to appear immediately so that
GetImpersonationUserName
SetProperty
+ r#S
System.Reflection
XMakeAttributes
get_TextInfo
Substring
AddValue
Client connection failed but we will wait for another connection. Exception: {0}
OutOfProcNode
GlobalMemoryStatusEx
BuildProjectWithOldOM
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
fileloggerparameters2
##########Top Missed Strings:
get_HasBeenLogged
get_ProcessorArchitecture
PropertyInfo
The task should be done executing before CompleteTask.
VERBOSITY=
ignoreVersion
potentialProjectOrSolutionFiles
Microsoft Time-Stamp PCA0
Microsoft.Build.Framework.ITask
set_Next
returnTargetOutputs
ReadOnlyEmptyDictionary`2
MSBuildArchitecture
GetLoggingEventId
MSBuild will use up to the number of processors on the
The default is not to append to the log file.
InitializationError
binPath
EnsureCapacity
filelogger7
ToolsVersion
TargetParameterCountException
RunInSTAAttribute
GetWriteTranslator
MSBuild
QueueThreadPoolWorkItemWithCulture
KeepDuplicates
consoleLoggerParameters
DisableConsoleColor--Use the default console colors
project file to build. Use a semicolon or a comma
ReadBoolean
V=DIAG
ProcessTimes
shutdownException
pConfigurationFile
get_Code
get_MetadataCount
AssemblyFileVersionAttribute
NtQueryInformationProcess
AtomName
TaskFinishedEventArgs
Unquote
internEliminatedStrings
ENABLEMPLOGGING;
MissingProjectError
logfile=msbuild
internRejects
<ExceptionMessageArgs>k__BackingField
cchBuffer
GenerateHostHandshakeFromBase
UpdateEnvironmentForMainNode
Microsoft.Build.Framework.ITaskItem2.set_EvaluatedIncludeEscaped
GetBuffer
DllInitPerf
DangerousGetHandle
recursing
get_ExceptionMessage
GetAssemblyName
GatherAutoResponseFileSwitches
@Forcing load of Microsoft.Build.Engine because MSBUILDOLDOM=1...
senderName
InstantiateAndExecuteTask
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />
assemblyName
MSB0001: Internal MSBuild Error:
GetProperties
X32CLR4
CrashedDuringInitialization
unformattedMessage
get_LineNumberOfTask
ProcessIoPortHandlers
Microsoft Time-Stamp Service0
taskLine
U0S0Q
&"&+&^&
<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
GetTypeCode
"MSBuild<nodeid>.log". The location of the files and
System.Diagnostics
MSBUILDGINORMOUSINTERNTHRESHOLD
Win32Exception
SplitStringOnNewLines
AutoResetEvent
FileCopy
UnrecognizedToolsVersion
How did we manage to get a task parameter that isn't a valid parameter type?
VS_VERSION_INFO
</compatibility>
MaxProcessInfoClass
MSBuild.Strings.resources
SatelliteContractVersionAttribute
Preprocess
Jc2I
ginormousCharsSaved
PrivateBuild
guidData
There should be some potential project or solution files
RuntimeTypeHandle
KeyNotFoundException
sharedResources
Event type "{0}" was expected to be serializable using the .NET serializer. The event was not serializable and has been ignored.
BeginInvoke
lpString
WriteEventToStream
AddRef
getFiles
Microsoft.Build.Tasks.Xaml.PartialClassGenerationTask
ManualResetEvent
http://schemas.microsoft.com/developer/msbuild/2003
xMaking the following modifications to the environment received from the parent node before applying it to the task host:
DebugTraceMessage
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
#MSBUILD : Logger error MSB1029: {0}
=============
TreatAsLocalProperty
ILogger
get_ExceptionMessageArgs
get_ColumnNumberOfTaskNode
RepeatedResponseFileError
externalProjectFinishedEventArgs
get_TargetId
architectureB
/toolsversion:3.5
subcategory
TaskFinishedEvent
dummy
ICancelableTask
.config
EndBuild
false
begin
FileSystemInfo
SafeHandle
LogErrorDelegate
get_IsValueType
value__
E"{0}" is a reserved item metadata, and cannot be modified or deleted.
System.Collections.IDictionary.get_Keys
ReadBytes
NullIntPtr
taskCompleteLock
FileLogger1
EscapingUtilities
/debug
Cannot call this method when reading!
DependsOnTargets
ug<+"
commandLine
messageArgs
LoggerAbort
ftLastAccessTimeLow
IsVCProjFilename
IsParameterizedSwitch
NodeConfiguration
GetCurrentTaskHostContext
"""""""""""""""""%""%""%""%""%""""""""""""""""""
CLSCompliantAttribute
Yield
badCommandLineArg
190726200848Z0t1
FileStream
get_Immutable
emptySplits
startIndex
Lazy`1
quiet
SafeHandleZeroOrMinusOneIsInvalid
template and append the node id to this fileName to
GenericComparerConsiderRetargetable
ChangeLinkStatus
LinkStatusChangedDelegate
IsBadlyCasedSpecialTaskAttribute
System.Collections.IDictionary.get_IsFixedSize
IsNullOrEmpty
currentArchitecture
.NET CLR Memory
GetProcAddress
if Doubled
180712201119Z
System.Threading
ReadBuildMessageEventFromStream
packetReceivedEvent
XmlSchemaSet
Huge Strings MRU Size
-2re9
ProductName
fileVersion
BeginBuild
get_Flags
AssemblyCopyrightAttribute
GetHelpKeyword
System.Collections.IDictionary.Contains
available. Some additional available parameters are:
IsDefined
GetHandshakeHashCode
nSize
hkey_current_user
ProcessConsoleLoggerSwitch
about the configurations built and how they were
removeGlobalProperties
AOC1'0%
get_IsInvalid
ENABLEMPLOGGING
ArrayList
If MSBuild debugging does not work correctly, please verify that the "Just My Code" feature is enabled in Visual Studio, and that you have selected the managed debugger.
/nr:true
Link not inactive. Status is {0}
SeekOrigin
CannotAutoDisableAutoResponseFile
Microsoft.Build.CommandLine
exceptionMessage
ResolveAssembly
CopyrightMessage
badCommandLineArgValue
set_Verbosity
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />
MSBuildRuntime
$Microsoft Root Certificate Authority0
hWritePipe
MSBuild{0}
<!-- Windows 8 and Server 2012 -->
loggerDescription
Microsoft Time-Stamp Service
.J=,F
/L|52
FileExists
IsWhiteSpace
StartsWith
GetClientHandshake
considerRetargetableFlag
IComparer
6211.1-
KZr4
SetTaskHostEnvironment
condition
Serialize
DisableMPLogging-- Disable the multiprocessor
IBuildEngine4
COWAIT_ALERTABLE
get_HelpKeyword
VerifyResourceStringExists
Peak Virtual Memory
nodeBuildEvent was null
Evaluate
get_InvariantCulture
finishedEvent
CompleteTask
BuildRequestData
pdwIndex
FileVersion
MSBuild MyApp.sln /t:Rebuild /p:Configuration=Release
TotalVirtual
WindowsPrincipal
MSBUILD :
invalidSwitch
"%"%"%""%"%"%"%"
Microsoft Corporation1&0$
BucketedPrioritizedStringList
1(0&0
ProcessWx86Information
SecurityException
registeredTaskObjectCache
newEnvironment
UnescapeDataString
<unknown>
versions specified by individual projects. (Short form:
(Short form: /pp)
/verbosity:<level> Display this amount of information in the event log.
sharedReadBuffer
Parent disconnected abruptly
ArchitectureValuesMatch
M[H*V
IComparer`1
result
<!-- Windows Vista and Server 2008 -->
PROCESSINFOCLASS
mustBeZero
IsItemSpecModifier
MSBUILD : error MSB1036: There is an invalid extension in the /ignoreprojectextensions list. Extensions must start with a period ".", have one or more characters after the period and not contain any invalid path characters or wildcards.
<QueueThreadPoolWorkItemWithCulture>b__0
NewGuid
m`](}'fi
GetLastWriteFileUtcTime
DrivePattern
ResetBuildState
DefaultDllImportSearchPathsAttribute
get_TaskParameters
Console_CancelKeyPress
dwAllocationGranularity
NotExpectedException
PacketFactoryRecord
NoConsoleLogger
GetAssembly
FUSION_E_PRIVATE_ASM_DISALLOWED
<Console_CancelKeyPress>b__17_0
6MSBUILD : error MSB1022: Response file does not exist.
AggregateParameters
get_Position
@MSBUILD : error MSB1019: Logger switch was not correctly formed.
IsValidScalarInputParameter
mergedArchitecture
IsInRole
180712200848Z
(MSBUILD : error MSB1001: Unknown switch.
<>9__17_0
fileModifiedTimeUtc
ModifiedTime
v4.0.30319
projectFileNames
Peak User Processor Time
PerformanceCounterType
Requested
TrimAndStripAnyQuotes
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
/ignoreprojectextensions:<extensions>
Func`2
System.Runtime.Serialization.Formatters.Binary
e_.,>
threads
NotImplementedException
ftCreationTimeHigh
shutdownEvent
TargetStartedEventArgs
resolverLoadedType
set_CharBuffer
IsParameterizedSwitchSet
MSB4188: Build was canceled.
<assemblyIdentity
XmlReaderSettings
targets
useResultsCache
SolutionParseInvalidProjectFileNameCharacters
PacketReceived
get_PeakVirtualMemorySize64
Microsoft.Win32
AvailableExtendedVirtual
SubCategoryForSchemaValidationErrors
RemoveFilesWithExtensionsToIgnore
nodereuse
BuildStartedEvent
MSBUILDDIRECTORYDELETRETRYTIMEOUT
WriteExternalProjectStartedEventToStream
scheduled to nodes.
CodeMarkerStartEnd
4.7.3190.0 built by: NET472REL1LAST_C
PipeStreamImpersonationWorker
GetType
(Short form: /ignore)
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />
<MSBUILD : error MSB1042: Node reuse value is not valid. {0}.
Small Strings MRU Size
packetStream
,7r>8
Need modifier to apply to item-spec.
IdentityReference
TotalPageFile
multiple loggers, specify each logger separately.
initialized
NodeMode
SmallMruThreshhold
EventArgsFormatting
ProcessBasePriority
CrashedDuringExecution
factoryMethod
MSBUILDSMALLINTERNTHRESHOLD
get_ProjectInstanceId
<!-- Windows 7 and Server 2008 R2 -->
SetEnvironmentVariable
updateEnvironmentAndLog
taskAssemblyFile
set_ToolsetDefinitionLocations
ParameterType
get_Mode
TaskParameterTypeVerifier
hProcess
<ReportStatistics>b__24_5
ProjectUpgradeNeededToVcxProj
PerformanceSummary--Show time spent in tasks, targets
<>9__24_5
NodeShutdown
ReadTaskCommandLineEventFromStream
FileLoggerParameters6
CreateAndConfigureLogger
NodeEndpointOutOfProcTaskHost
WriteByte
fileAttributes
get_IsAbstract
lightUpKeyResult
VerifyThrow
Should always have an explicit architecture when calling this method
CreateDelegate
GetMethod
If we have message args, we need a message.
LinkedList`1
Process
Microsoft.Build.BackEnd
noParameters
InternalName
get_ForwardingLoggerDescription
(2) the directory of the first project or solution built
GetCollectionForLifetime
get_Length
StartLocalNodeOldOM
get_Name
GetProcessById
Nyf*V
HandleTaskHostConfiguration
The available verbosity levels are: q[uiet], m[inimal],
/distributedFileLogger
t^{w?
OrderByDescending
consoleloggerparameters
switchesNotFromAutoResponseFile
SecurityIdentifier
get_Parameters
InvalidPreprocessPath
SetOwner
AddRemappedAssemblyName
LargeMruSize
MissingVerbosityError
FileLoadException
IsOrdinalEqualToStringOfSameLength
parameterType
ReadInt16
GetShortPathName
get_IsRunningMultipleNodes
TypeFilter
Shared.ParameterCannotBeNull
DebuggerStepThroughAttribute
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />
verbositySwitchParameters
set_CurrentCulture
sinkId
exeName
The resource string "{0}" for the "{1}" task cannot be found. Confirm that the resource name "{0}" is correctly spelled, and the resource exists in the task's assembly.
{0}{1}{0}
VSCodeMarkersEnabled
MissingMethodException
O /nologo Do not display the startup banner and copyright message.
KillTree
Microsoft.Build.Evaluation
TaskNotMarshalByRef
IsCriticalException
NoLogo
isSimpleName
multiple response files, specify each response file
switchParameters
@%*?@$();'
xmlns
GetLastAccessTime
en-US
{S?YN {
SendData
add_ValidationEventHandler
receivedPackets
<!-- Windows Threshold -->
CreateInstanceAndUnwrap
COWAIT_WAITALL
IsXmlException
FILE_ATTRIBUTE_DIRECTORY
multiple loggers, specify each logger separately.
nodemode
rejects
get_OEMCodePage
kernel32.dll
229803+4379500
parameterlessSwitches
<FinalParameterValues>k__BackingField
FileLogger7
get_ProjectFileOfTaskNode
VerifyThrowInternalNull
Microsoft Corporation1(0&
get_HasValue
groupedFileLoggerParameters
lpMaximumApplicationAddress
KMSBUILD : Configuration error MSB1043: The application could not start. {0}
commandLineSwitches
CreateFromStream
get_RawValue
get_ParameterType
get_OrdinalIgnoreCase
set_Name
terminatePacketPump
GenericComparer
<MSBUILD : error MSB1031: Specify the maximum number of CPUs.
Connection timed out waiting a host to contact us. Exiting comm thread.
exitType
NotExpectedReflectionException
System.Collections.IDictionary.Clear
SMSB4132: The tools version "{0}" is unrecognized. Available tools versions are {1}.
GetReadTranslator
InstallHandler
SetErrorMode_Win7AndNewer
fileloggerparameters
Single
)Unsupported .NET Framework version "{0}".
XmlSchema
VerifyProjectSchema
set_Version
SetValue
XmlSchemaException
"Microsoft Time Source Master Clock0
Il0{!
target
ExecuteTargets
set_CancelPending
zMSBUILD : error MSB1032: Maximum CPU count is not valid. Value must be an integer greater than zero and no more than 1024.
20180807074604Z
UnexpectedParametersError
PacketPumpProc
WAIT_OBJECT_0
Shared.CannotChangeItemSpecModifiers
Connect
packetAvailable is null
ReadLightupBool
WRITE_DAC
/logger:XMLLogger,C:\Loggers\MyLogger.dll;OutputAsHTML
AJY2G
GetDecoder
array
System.Collections.IDictionary.get_IsReadOnly
RegisteredTaskObjectCacheBase
ShowVersion
Shared.FailedDeletingTempFile
smallMruThreshhold
HelpMessage_12_VerbositySwitch
dwActiveProcessorMask
RegisterPacketHandler
get_Culture
keyComparer
usingSwitchesFromAutoResponseFile
is64BitProcess
cacheDirectory
Unexpected end of stream while reading for handshake
get_LastWriteTime
ITaskItem2
IsValidVectorInputParameter
build log will be written.
{0} unexpectedly empty
Evidence
readOnlyEmptyDictionary
Outputs
defaultXmlNamespace
methodInfo
ProcessTargetSwitch
get_NodeConnectionTimeout
SubCategoryForSolutionParsingErrors
get_LCID
assemblyLoadInfo
TryMergeArchitectureValues
WriteLine
InvalidProjectFileException
HandleShutdown
GatherCommandLineSwitches
newLines
NodePacketFactoryMethod
IEqualityComparer
CollectionHelpers
nCipher DSE ESN:12B4-2D5F-87D41%0#
errorCode
SetUnknownSwitchError
DetectedParameterlessSwitch
logger.
smallMru
aUserParams
ClearCacheDirectory
not displayed
Debugger
fileSpec
_^7c77
Examples:
pHandles
add_AssemblyResolve
ProcessHandleCount
RunAsClient
fMSB5007: Error parsing the project configuration section in solution file. The entry "{0}" is invalid.
190102230052Z0
get_Owner
DefaultNodeConnectionTimeout
DllUnInitPerf
BuildErrorEvent
contents of an existing log file.
ConnectionFailed
CreateTask
ItemName
AssemblyTitleAttribute
UnauthorizedAccessException
InvalidExtensionToIgnore
-)r68
processId
!This program cannot be run in DOS mode.
handle
asyncDataMonitor
packetQueue is null
Large Strings (>=
parameterValue
InheritedFromUniqueProcessId
)]]4
GetTypeFromHandle
BitConverter
MSBUILDLOGASYNC
Required
Peak Total Processor Time
TypeLoader
System.Globalization
get_PeakWorkingSet64
Exclude
GetCurrentDirectory
Validate
Redmond1
remove_CancelKeyPress
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
OperatingSystem
warnAndContinue
VerifyThrowArgumentArraysSameLength
Initialize
detailedSummary
System.Security
''!=''
CreateDelegateRobust
LMSBUILD : error MSB1025: An internal failure occurred while running MSBuild.
TimeSpan
FileLogger6
set_Capacity
:MSBUILD : error MSB1026: Schema file '{0}' does not exist.
LogError
200831222932Z0y1
({2}):
System.Collections.Generic.IEnumerator<T>.get_Current
.vcproj
fileloggerparameters8
targetNames
ValueTypeArray
Failed to convert the handshake to big-endian. {0}
GetTaskHostClientHandshake
MSBUILDHUGEINTERNTHRESHOLD
"Could not find directory path: {0}
We should never have a null configuration when we're trying to log errors!
kMSB5002: The task executable has not completed within the specified limit of {0} milliseconds, terminating.
ErrorAndContinue
CopyOnWriteBackingDictionary`2
get_NodeId
Remove
MSB5022: The MSBuild task host does not support running tasks that perform IBuildEngine callbacks. If you wish to perform these operations, please run your task in the core MSBuild process instead. A task will automatically execute in the task host if the UsingTask has been attributed with a "Runtime" or "Architecture" value, or the task invocation has been attributed with an "MSBuildRuntime" or "MSBuildArchitecture" value, that does not match the current runtime or architecture of MSBuild.
eMSBUILD : error MSB1041: Specify one or more parameters for node reuse if using the /nodereuse switch
r~akow
OutOfMemoryException
object
Exception reading from server. {0}
get_MetadataNames
get_LinkStatus
Console
culture
SolutionParseVersionMismatchError
SecurityCriticalAttribute
get_CounterName
value used is 1. If the switch is used without a value
InitialTargets
GetLastWriteDirectoryUtcTime
,MSBUILD : MSB1044: Project is not valid. {0}
N=|)H
AddRange
runtime
endpoint
remove_OnLinkStatusChanged
msbuildArchitecture
SetError
itemName
and projects.
minimal
<MSBUILD : error MSB1030: Maximum CPU count is not valid. {0}
BuildWarningEventArgs
KeepDuplicateOutputs
GatherParameterizedCommandLineSwitch
PipeAccessRights
System.IDisposable.Dispose
ProcessFileLoggers
CustomBuildEventArgs
http://microsoft.com0/
oK0D$"<
CreateFullName
Peak Privileged Processor Time
ExpensiveConvertToString
</requestedPrivileges>
switchParameterIndicator
GetCurrentProcess
oopTaskHostNode
TargetFinishedTranslator
keepMetadata
IsRootedNoThrow
ConsoleLoggerParameters
LogMessagePacket
GetToolset
GetProcesses
ModifyingTaskHostEnvironmentHeader
MissingConsoleLoggerParameterError
The <logger class> syntax is:
Library
NodeEngineShutdownReason
ReadTaskBuildErrorEventFromStream
TargetInvocationException
get_UserProcessorTime
taskExceptionMessage
System.Resources
fileName
get_CurrentUICulture
LogMessagePacketBase
RegistryView
/validate:MyExtendedBuildSchema.xsd
appDomainSetup
X32CLR2
FileUtilities
Close
Nullable`1
InternalsVisibleToAttribute
GetTaskHostContext
The parameters are:
Microsoft.Build.Framework
</assembly>
oldom
We should never have a null configuration during a BuildEngine callback!
WaitCallback
CompareTo
buildMessageEventArgs
logfile
r:xcf.
070403125309Z
Translation
smallMruSize
CharArrayInternTarget
FileExistsNoThrow
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
{<assembly name>[,<strong name>] | <assembly file>}
Schema validation
MissingPropertyError
sharedBuffer
IsCollectionEmptyOrUncreated
unformatted
MSBUILD : error
packetPump
The "{0}" task has not registered its resources. In order to use the "TaskLoggingHelper.FormatResourceString()" method this task needs to register its resources either during construction, or via the "TaskResources" property.
assemblyPaths
<Value>k__BackingField
filePath
switchName
AssemblyKeyFileAttribute
/consoleloggerparameters:<parameters>
file logger, see description of /distributedFileLogger.
missingParametersErrorMessage
RuntimeCompatibilityAttribute
IsTaskClass
=====================
get_TaskExceptionMessage
switchNames
PebBaseAddress
.ctor
UNHANDLED EXCEPTIONS FROM PROCESS {0}:
IsParameterlessSwitchEnabled
IDictionary`2
Reverse
[Microsoft .NET Framework, version {1}]
ProductVersion
name="MSBuild"
MSBUILDDONOTTHROWINTERNAL
ugC+%
ExpandEnvironmentVariables
InvalidSchemaFile
filelogger1
The version of the MSBuild Toolset (tasks, targets, etc.)
GetEnvironmentVariable
throwExceptions
parameter
SolutionParseProjectDepGuidError
CopyMemory
{5}:
System.IO.Pipes
Enter
param
treatAsLocalProperty
IsEntered
NotSupportedException
<CancelPending>k__BackingField
EscapeDisplayNameCharacters
filelogger2
op_Equality
GetPublicKeyToken
PerformanceCounter
<ExceptionMessage>k__BackingField
Cannot send when link status is not active. Current status {0}
HugeMruSize
ug(2=
Build
validate
ReadFromStream
/ignoreprojectextensions:.sln
GetName
COWAIT_NONE
beforeTargets
LoggerCreationError
get_Toolsets
+Validating project using schema file "{0}".
EndInvoke
get_IsSerializable
PossiblyOmittedMaxCPUSwitch
SolutionParseProjectError
HelpMessage_6_VersionSwitch
errorAndStop
WriteToStream
fileEndColumn
RemoveNulls
verbosity
get_Subcategory
EndOfStreamException
1/0-0
get_FullName
filename
System.Security.Principal
InternWithStatistics
RemoveHandler
ug=,~
<>c__DisplayClass29_0
get_LinePosition
SizeOf
ProjectFinishedEvent
enableNodeReuse
filelogger3
ExternalProjectFinishedEventArgs
ExtractSwitchParameters
DeleteNoThrow
_aBuff
if Zero
haveScannedPublicTypes
RegistryHive
lastLoggedTicks
Incomplete header read from server. {0} of {1} bytes read
ProcessRaisePriority
BuildRequestBlocker
get_LineNumber
HelpMessage_2_Description
0B31F07FE164DD93AC9BEA9F9517786C7D713A1C
WarningsOnly--Show only warnings.
TaskEngineAssemblyResolver
5.5"5&5
logging style of output when running in
===================
System.Runtime.InteropServices
InterningBinaryReader
GetCounters
EnsureNoLeadingSlash
EMSB5012: Unexpected end-of-file reached inside "{0}" project section.
NativeMethodsShared
BuildMessageEvent
DefaultValue
System.Collections.ICollection.get_Count
hModule
propertyName
({2},{3}-{8}):
System.Collections.IEnumerator.Current
CreateForwardingLoggerRecord
Should always have an explicit runtime when calling this method
MSBuild XML and any tasks and loggers it uses.
MSBuild STA task runner thread
BuildEventContext
N0L0J
HelpMessage_5_NoLogoSwitch
No packet handler for type {0}
CancelTask
GetFileInfoNoThrow
chars) Hits
get_IsEnum
IsHexDigit
CancelAllSubmissions
nodeBuildEvent
removeCarriageReturn
Intern Hits
translator
WriteBuildMessageEventToStream
GetHashCode
fileloggerparameters4
5LwXM
InitializeMismatchedEnvironmentTable
System.Collections.IEnumerator.get_Current
ExceptionHandling
build, with their boundaries marked. This can be
requiredPlatform
parameterlessSwitch
System.Collections.Generic
GetBuildEventArgFromId
K Setting '{0}' to '{1}' rather than the parent environment's value, '{2}'.
<>9__24_3
VerifyThrowInternalLockHeld
IOException
BuildWarningEvent
MSBUILDSMALLINTERNSIZE
@r<)J
set_ValidationType
/logger:XMLLogger,MyLogger,Version=1.0.2,Culture=neutral
MaxListSize
We should never have a task in the process of executing when we receive NodeBuildComplete.
QGQi6)C
get_Major
Microsoft.Build.Execution
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />
get_CurrentExecutablePath
requiredRuntime
TaskCompleteType
GetEnvironmentStrings
defaultTargets
/p:Configuration=Debug;TargetFrameworkVersion=v3.5
set_ExceptionMessageArgs
RuntimeHelpers
System.Collections.IEnumerable.GetEnumerator
100ns
System.IO
set_Column
MsgWaitOne
GetCurrent
Small Estimated Bytes Held
<PacketPumpProc>b__0
VerifyThrowInvalidOperation
SetParameterlessSwitch
Insert
get_StartupDirectory
230012+4379650
Thales TSS ESN:96FF-4BC5-A7DC1%0#
currentConfiguration
MSBuildTaskHostDoNotUpdateEnvironment
20180808074604Z0w0=
MSBUILDDISABLENODEREUSE
*Fro:
clrVersion
SetRemappedFromDefaultAfterSerialization
Microsoft.Win32.SafeHandles
PROCESS_VM_WRITE
customEventsLoaded
ConfigurationErrorsException
showProjectFile
targetOutputs
IsSlash
MakeRelative
Parameter "{0}" cannot be null.
need a type filter
required
syntaxError
TryMergeRuntimeValues
get_ReadOnlyEmptyInstance
whatIfDoubled
project
corresponding /filelogger[n] switch.
ABp*!
MSBuildHybridDictThreshold
ProcessPriorityBoost
}YYUYYUUUYUUU
MSBUILDENABLEDEBUGTRACING
get_TaskException
hReadPipe
RemotingServices
__;_77
GetSystemInfo
GetAssemblyNameEx
ShowHelpMessage
stream
&*.sf
GetString
System.Collections.IDictionary.get_Item
Can't join on the same thread.
other parameters for the fileLogger can be specified
IDictionaryEnumerator
The switch name extracted from either the partially or completely unquoted arg should be the same.
set_Cancel
debugCommunications
and will be reused by subsequent builds (default)
get_Type
FileLogger5
Software\Microsoft\MSBuild\4.0
SafeFileHandle
dwNumberOfProcessors
FileTimeFormat
Writing handshake to parent
gMSB5008: Error parsing the solution configuration section in solution file. The entry "{0}" is invalid.
TryParse
LoggerFailure
mai)3
OriginalItemSpec
lineNumber
System.Collections.ICollection.get_IsSynchronized
buildLock
MSBuild_
Verbosity=minimal
| Filename |
8243c472d762671c2cc06a71283b51c5a6a3f20c32e0cb5d6d16c4c696f7b39a
|
|---|---|
| File Type | PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows |
| Associated Filenames |
b60eb62f6c24d4a495a0dab95cc49624ac5099a2cc21f8bd010a410401ab8cc3
|
| File Size | 244736 bytes |
| MD5 | ebf781642ab563364fd42fc58709a649 |
| SHA1 | 5e516195c6284b2c048335111e13e4142d97f093 |
| SHA256 | 8243c472d762671c2cc06a71283b51c5a6a3f20c32e0cb5d6d16c4c696f7b39a [VT] [MWDB] [Bazaar] |
| SHA3-384 | 0acd30773ded71c28949a4fe8e643e4d2531ea478fd4c2e45f33a0303a3ebdc1634661b1e14cd104165ade61bc4bd88c |
| CRC32 | 5BA2E83D |
| TLSH | T114345A0163ED5216F6FF0AB5B8B006148B76F857E862D75E388C61EC1B72790E9A1373 |
| Ssdeep | 3072:a1rVk5r6ecFBf02RFir+kCWD8uMslOqmL2epBU4rwOeOubZS4xLuz3:alGZAL02bir+kNfOJSeHVGSL |
| PE DotNET | File Strings Bingraph Vba2Graph VirusTotal |
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | PDB Path | Compile Time | Import Hash | Icon | Icon Exact Hash | Icon Similarity Hash | Icon DHash |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 0x00400000 | 0x00039a6e | 0x0004816a | 0x0004816a | 4.0 | f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb | 2018-08-07 07:21:34 | f34d5f2d4577ed6d9ceec516c1f5a744 |  |
4ba4927ef84c93275375106cf15f43b5 | c3ed3b17e7325aadf87dcea53e2bc480 | c4b2b3b2ece6e6ba |
Version Infos
| CompanyName | Microsoft Corporation |
|---|---|
| FileDescription | MSBuild.exe |
| FileVersion | 4.7.3190.0 built by: NET472REL1LAST_C |
| InternalName | MSBuild.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | MSBuild.exe |
| ProductName | Microsoft® .NET Framework |
| ProductVersion | 4.7.3190.0 |
| Comments | Flavor=Retail |
| PrivateBuild | DDBLD438 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000200 | 0x00002000 | 0x00037a8c | 0x00037c00 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 5.96 |
| .rsrc | 0x00037e00 | 0x0003a000 | 0x00003f00 | 0x00004000 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 6.27 |
| .reloc | 0x0003be00 | 0x0003e000 | 0x0000000c | 0x00000200 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ | 0.10 |
Overlay
| Offset | 0x0003c000 |
| Size | 0x00003e50 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| IBC | 0x0003a29c | 0x00000c5d | LANG_NEUTRAL | SUBLANG_NEUTRAL | 6.28 | None |
| RT_ICON | 0x0003aefc | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.21 | None |
| RT_ICON | 0x0003b1e4 | 0x00000128 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.13 | None |
| RT_ICON | 0x0003b30c | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.57 | None |
| RT_ICON | 0x0003bbb4 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.13 | None |
| RT_ICON | 0x0003c11c | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.77 | None |
| RT_ICON | 0x0003d1c4 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.69 | None |
| RT_GROUP_ICON | 0x0003d62c | 0x0000005a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.67 | None |
| RT_VERSION | 0x0003d688 | 0x000003c8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.52 | None |
| RT_MANIFEST | 0x0003da50 | 0x000004ae | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.05 | None |
Imports
| Name | Address |
|---|---|
| _CorExeMain | 0x402000 |
Assembly Information
| Name | MSBuild |
|---|---|
| Version | 4.0.0.0 |
Assembly References
| Name | Version |
|---|---|
| mscorlib | 4.0.0.0 |
| System | 4.0.0.0 |
| Microsoft.Build.Framework | 4.0.0.0 |
| Microsoft.Build | 4.0.0.0 |
| System.Xml | 4.0.0.0 |
| Microsoft.Build.Engine | 4.0.0.0 |
| System.Core | 4.0.0.0 |
| System.Configuration | 4.0.0.0 |
Custom Attributes
| Type | Name | Value |
|---|---|---|
| Assembly | [mscorlib]System.Runtime.CompilerServices.InternalsVisibleToAttribute | MSBuild.Unittest, PublicKey=002400000480000094000000060200000024000052534131000400000100010007d1fa57c4aed9f0a32e84aa0faefd0de9e8fd6aec8f87fb03766c834c99921eb23be79ad9d5dcc1dd9ad236132102900b723cf980957fc4e177108fc607774f29e8320e92ea05ece4e821c0a5efe8f1645c4c0c93c1ab99285d622caa652c1dfad63d745d6f2de5f17e5eaf0fc4963d261c8a12436518206dc093344d5ad2 |
| Assembly | [mscorlib]System.Runtime.CompilerServices.InternalsVisibleToAttribute | MSBuild.Whidbey.Unittest, PublicKey=002400000480000094000000060200000024000052534131000400000100010007d1fa57c4aed9f0a32e84aa0faefd0de9e8fd6aec8f87fb03766c834c99921eb23be79ad9d5dcc1dd9ad236132102900b723cf980957fc4e177108fc607774f29e8320e92ea05ece4e821c0a5efe8f1645c4c0c93c1ab99285d622caa652c1dfad63d745d6f2de5f17e5eaf0fc4963d261c8a12436518206dc093344d5ad2 |
| Assembly | [mscorlib]System.Reflection.AssemblyTitleAttribute | MSBuild.e |
| Assembly | [mscorlib]System.Reflection.AssemblyDescriptionAttribute | MSBuild.e |
| Assembly | [mscorlib]System.Reflection.AssemblyDefaultAliasAttribute | MSBuild.e |
| Assembly | [mscorlib]System.Reflection.AssemblyCompanyAttribute | Microsoft Corporati |
| Assembly | [mscorlib]System.Reflection.AssemblyProductAttribute | Microsoft\xc2\xae .NET Framewo |
| Assembly | [mscorlib]System.Reflection.AssemblyCopyrightAttribute | \xc2\xa9 Microsoft Corporation. All rights reserve |
| Assembly | [mscorlib]System.Reflection.AssemblyFileVersionAttribute | 4.7.3190 |
| Assembly | [mscorlib]System.Reflection.AssemblyInformationalVersionAttribute | 4.7.3190 |
| Assembly | [mscorlib]System.Resources.SatelliteContractVersionAttribute | 4.0.0 |
| Assembly | [mscorlib]System.Resources.NeutralResourcesLanguageAttribute | en- |
| Assembly | [mscorlib]System.Reflection.AssemblyKeyFileAttribute | f:\dd\tools\devdiv\FinalPublicKey.s |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Diagnostics.DebuggerDisplayAttribute | Count = |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
| TypeDef | [mscorlib]System.Reflection.DefaultMemberAttribute | It |
Type References
| Assembly | Type Name |
|---|---|
| mscorlib | System.Runtime.CompilerServices.ExtensionAttribute |
| mscorlib | System.Runtime.CompilerServices.CompilationRelaxationsAttribute |
| mscorlib | System.Diagnostics.DebuggableAttribute |
| mscorlib | System.Diagnostics.DebuggableAttribute/DebuggingModes |
| mscorlib | System.Runtime.CompilerServices.InternalsVisibleToAttribute |
| mscorlib | System.Runtime.InteropServices.DllImportSearchPath |
| mscorlib | System.Runtime.InteropServices.DefaultDllImportSearchPathsAttribute |
| mscorlib | System.Runtime.InteropServices.ComVisibleAttribute |
| mscorlib | System.CLSCompliantAttribute |
| mscorlib | System.Reflection.AssemblyTitleAttribute |
| mscorlib | System.Reflection.AssemblyDescriptionAttribute |
| mscorlib | System.Reflection.AssemblyDefaultAliasAttribute |
| mscorlib | System.Reflection.AssemblyCompanyAttribute |
| mscorlib | System.Reflection.AssemblyProductAttribute |
| mscorlib | System.Reflection.AssemblyCopyrightAttribute |
| mscorlib | System.Reflection.AssemblyFileVersionAttribute |
| mscorlib | System.Reflection.AssemblyInformationalVersionAttribute |
| mscorlib | System.Resources.SatelliteContractVersionAttribute |
| mscorlib | System.Resources.NeutralResourcesLanguageAttribute |
| mscorlib | System.Reflection.AssemblyDelaySignAttribute |
| mscorlib | System.Reflection.AssemblyKeyFileAttribute |
| mscorlib | System.Reflection.AssemblySignatureKeyAttribute |
| mscorlib | System.Runtime.CompilerServices.RuntimeCompatibilityAttribute |
| mscorlib | System.Security.Permissions.SecurityAction |
| mscorlib | System.Security.Permissions.SecurityPermissionAttribute |
| mscorlib | System.Security.UnverifiableCodeAttribute |
| mscorlib | System.Object |
| mscorlib | System.DllNotFoundException |
| mscorlib | System.Guid |
| mscorlib | Microsoft.Win32.RegistryView |
| mscorlib | Microsoft.Win32.RegistryKey |
| mscorlib | System.Enum |
| mscorlib | System.ValueType |
| mscorlib | System.IDisposable |
| mscorlib | System.IO.BinaryReader |
| mscorlib | System.Text.Decoder |
| mscorlib | System.IO.Stream |
| mscorlib | System.IO.MemoryStream |
| mscorlib | System.Text.StringBuilder |
| mscorlib | System.Exception |
| mscorlib | System.Runtime.CompilerServices.CompilerGeneratedAttribute |
| mscorlib | System.Text.UTF8Encoding |
| mscorlib | System.Reflection.DefaultMemberAttribute |
| System | System.Collections.Generic.LinkedList`1 |
| mscorlib | System.WeakReference |
| System | System.Diagnostics.Stopwatch |
| mscorlib | System.Collections.Generic.Dictionary`2 |
| mscorlib | System.Collections.Generic.KeyValuePair`2 |
| mscorlib | System.Collections.Generic.IEnumerable`1 |
| mscorlib | System.Nullable`1 |
| System | System.Collections.Generic.LinkedListNode`1 |
| mscorlib | System.Func`2 |
| mscorlib | System.Collections.Generic.List`1 |
| mscorlib | System.TypeCode |
| mscorlib | System.Collections.ArrayList |
| mscorlib | System.Runtime.Serialization.SerializationInfo |
| mscorlib | System.Runtime.Serialization.StreamingContext |
| mscorlib | System.ParamArrayAttribute |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ILogger |
| Microsoft.Build | Microsoft.Build.Logging.LoggerDescription |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildEventArgs |
| System.Xml | System.Xml.XmlReaderSettings |
| System.Xml | System.Xml.XmlTextReader |
| mscorlib | System.IO.StreamReader |
| System.Xml | System.Xml.XmlReader |
| System.Xml | System.Xml.XmlException |
| System.Xml | System.Xml.Schema.XmlSchemaException |
| System.Xml | System.Xml.Schema.ValidationEventArgs |
| mscorlib | System.MarshalByRefObject |
| Microsoft.Build.Framework | Microsoft.Build.Framework.IBuildEngine4 |
| Microsoft.Build.Framework | Microsoft.Build.Framework.IBuildEngine3 |
| Microsoft.Build.Framework | Microsoft.Build.Framework.IBuildEngine2 |
| Microsoft.Build.Framework | Microsoft.Build.Framework.IBuildEngine |
| mscorlib | System.Collections.Generic.IDictionary`2 |
| mscorlib | System.Threading.AutoResetEvent |
| System | System.Collections.Generic.Queue`1 |
| mscorlib | System.Threading.ManualResetEvent |
| Microsoft.Build | Microsoft.Build.Execution.NodeEngineShutdownReason |
| mscorlib | System.Threading.Thread |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildErrorEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildWarningEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildMessageEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.CustomBuildEventArgs |
| mscorlib | System.Collections.IDictionary |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildEngineResult |
| mscorlib | System.Collections.Generic.IList`1 |
| Microsoft.Build.Framework | Microsoft.Build.Framework.RegisteredTaskObjectLifetime |
| mscorlib | System.Threading.WaitHandle |
| mscorlib | System.IO.StreamWriter |
| mscorlib | System.Collections.Generic.IEnumerator`1 |
| Microsoft.Build.Framework | Microsoft.Build.Framework.MessageImportance |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ITask |
| mscorlib | System.AppDomain |
| mscorlib | System.AppDomainSetup |
| mscorlib | System.Threading.ThreadStart |
| mscorlib | System.Reflection.PropertyInfo |
| mscorlib | System.Type |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ICancelableTask |
| Microsoft.Build | Microsoft.Build.Execution.BuildSubmission |
| mscorlib | System.TypeInitializationException |
| System | System.Configuration.ConfigurationException |
| Microsoft.Build | Microsoft.Build.Logging.FileLogger |
| Microsoft.Build | Microsoft.Build.Logging.ConsoleLogger |
| Microsoft.Build | Microsoft.Build.Logging.ForwardingLoggerRecord |
| mscorlib | System.MTAThreadAttribute |
| System | System.Diagnostics.Process |
| System | System.Diagnostics.PerformanceCounterCategory |
| mscorlib | System.TimeSpan |
| System | System.Diagnostics.PerformanceCounter |
| mscorlib | System.InvalidOperationException |
| System | System.Diagnostics.PerformanceCounterType |
| mscorlib | System.ConsoleCancelEventHandler |
| Microsoft.Build.Framework | Microsoft.Build.Framework.LoggerVerbosity |
| mscorlib | System.IO.TextWriter |
| Microsoft.Build | Microsoft.Build.Exceptions.InvalidToolsetDefinitionException |
| Microsoft.Build.Framework | Microsoft.Build.Framework.LoggerException |
| Microsoft.Build | Microsoft.Build.Exceptions.InternalLoggerException |
| Microsoft.Build | Microsoft.Build.Exceptions.BuildAbortedException |
| Microsoft.Build.Engine | Microsoft.Build.BuildEngine.BuildPropertyGroup |
| mscorlib | System.Collections.Generic.Dictionary`2/Enumerator |
| mscorlib | System.ConsoleCancelEventArgs |
| mscorlib | System.Threading.WaitCallback |
| Microsoft.Build | Microsoft.Build.Evaluation.ProjectCollection |
| Microsoft.Build | Microsoft.Build.Evaluation.Project |
| Microsoft.Build | Microsoft.Build.Evaluation.Toolset |
| Microsoft.Build | Microsoft.Build.Execution.BuildRequestData |
| Microsoft.Build | Microsoft.Build.Execution.BuildParameters |
| Microsoft.Build | Microsoft.Build.Execution.BuildManager |
| Microsoft.Build | Microsoft.Build.Execution.BuildResult |
| Microsoft.Build | Microsoft.Build.Exceptions.InvalidProjectFileException |
| Microsoft.Build.Engine | Microsoft.Build.BuildEngine.Engine |
| Microsoft.Build.Engine | Microsoft.Build.BuildEngine.Project |
| mscorlib | System.NotSupportedException |
| mscorlib | System.Collections.IEnumerator |
| mscorlib | System.Security.SecurityException |
| mscorlib | System.UnauthorizedAccessException |
| mscorlib | System.IO.IOException |
| mscorlib | System.FormatException |
| mscorlib | System.ArgumentNullException |
| mscorlib | System.OverflowException |
| Microsoft.Build | Microsoft.Build.Execution.OutOfProcNode |
| mscorlib | System.ArgumentException |
| mscorlib | System.Reflection.Assembly |
| mscorlib | System.BadImageFormatException |
| mscorlib | System.Reflection.ReflectionTypeLoadException |
| mscorlib | System.MemberAccessException |
| mscorlib | System.Reflection.TargetInvocationException |
| mscorlib | System.Security.Principal.WindowsPrincipal |
| System.Core | System.IO.Pipes.PipeStream |
| mscorlib | System.Version |
| mscorlib | System.DateTime |
| mscorlib | System.MulticastDelegate |
| mscorlib | System.IAsyncResult |
| mscorlib | System.AsyncCallback |
| System.Core | System.IO.Pipes.NamedPipeServerStream |
| mscorlib | System.Security.Principal.SecurityIdentifier |
| System.Core | System.IO.Pipes.PipeSecurity |
| System.Core | System.IO.Pipes.PipeAccessRule |
| mscorlib | System.Security.Principal.WindowsIdentity |
| mscorlib | System.IO.BinaryWriter |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildEventContext |
| mscorlib | System.Globalization.CultureInfo |
| mscorlib | System.Collections.Generic.IEqualityComparer`1 |
| mscorlib | System.Diagnostics.DebuggerStepThroughAttribute |
| mscorlib | System.DateTimeKind |
| mscorlib | System.Runtime.Serialization.Formatters.Binary.BinaryFormatter |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ITaskItem |
| mscorlib | System.Security.SecurityCriticalAttribute |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ITaskItem2 |
| mscorlib | System.Collections.ICollection |
| mscorlib | System.ResolveEventHandler |
| mscorlib | System.ResolveEventArgs |
| mscorlib | System.IO.FileNotFoundException |
| mscorlib | System.Collections.IEnumerable |
| mscorlib | System.Collections.IDictionaryEnumerator |
| mscorlib | System.Array |
| mscorlib | System.Collections.Generic.ICollection`1 |
| mscorlib | System.Runtime.Serialization.OnDeserializedAttribute |
| mscorlib | System.Collections.Generic.List`1/Enumerator |
| mscorlib | System.Collections.DictionaryEntry |
| mscorlib | System.Runtime.CompilerServices.IteratorStateMachineAttribute |
| mscorlib | System.Diagnostics.DebuggerHiddenAttribute |
| mscorlib | System.Diagnostics.DebuggerDisplayAttribute |
| mscorlib | System.Collections.IComparer |
| mscorlib | System.Collections.IEqualityComparer |
| mscorlib | System.StringComparison |
| mscorlib | System.IO.FileStream |
| System | System.Text.RegularExpressions.Match |
| mscorlib | System.IO.FileInfo |
| System | System.Uri |
| System.Core | System.Collections.Generic.HashSet`1 |
| System | System.Text.RegularExpressions.Regex |
| mscorlib | System.Lazy`1 |
| mscorlib | System.Collections.Concurrent.ConcurrentDictionary`2 |
| mscorlib | System.EventArgs |
| mscorlib | System.Runtime.InteropServices.HandleRef |
| mscorlib | Microsoft.Win32.SafeHandles.SafeFileHandle |
| mscorlib | System.FlagsAttribute |
| mscorlib | Microsoft.Win32.SafeHandles.SafeHandleZeroOrMinusOneIsInvalid |
| mscorlib | System.UnhandledExceptionEventArgs |
| mscorlib | System.Reflection.MethodInfo |
| mscorlib | System.Delegate |
| mscorlib | System.IO.FileLoadException |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ExternalProjectFinishedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ExternalProjectStartedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.TaskCommandLineEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.TargetFinishedEventArgs |
| mscorlib | System.Reflection.TypeFilter |
| mscorlib | System.Reflection.AssemblyName |
| mscorlib | System.Reflection.ProcessorArchitecture |
| mscorlib | System.Resources.ResourceManager |
| mscorlib | System.Text.Encoding |
| mscorlib | System.BitConverter |
| mscorlib | Microsoft.Win32.RegistryHive |
| mscorlib | System.String |
| mscorlib | System.Int32 |
| mscorlib | System.IO.EndOfStreamException |
| mscorlib | System.IO.SeekOrigin |
| mscorlib | System.Environment |
| mscorlib | System.Console |
| mscorlib | System.StringComparer |
| mscorlib | System.Collections.Generic.IComparer`1 |
| mscorlib | System.RuntimeTypeHandle |
| mscorlib | System.IFormatProvider |
| mscorlib | Microsoft.Win32.Registry |
| mscorlib | System.Boolean |
| mscorlib | System.Char |
| mscorlib | System.IO.Path |
| mscorlib | System.IO.File |
| System.Xml | System.Xml.ValidationType |
| System.Xml | System.Xml.XmlResolver |
| System.Xml | System.Xml.Schema.ValidationEventHandler |
| System.Xml | System.Xml.Schema.XmlSchemaSet |
| System.Xml | System.Xml.Schema.XmlSchema |
| mscorlib | System.IO.TextReader |
| mscorlib | System.UnhandledExceptionEventHandler |
| mscorlib | System.Threading.Monitor |
| mscorlib | System.Threading.EventWaitHandle |
| mscorlib | System.Threading.ParameterizedThreadStart |
| mscorlib | System.Threading.ThreadAbortException |
| mscorlib | System.Runtime.Remoting.RemotingServices |
| mscorlib | System.Reflection.MemberInfo |
| mscorlib | System.Threading.ApartmentState |
| mscorlib | System.Reflection.BindingFlags |
| Microsoft.Build.Framework | Microsoft.Build.Framework.OutputAttribute |
| System.Configuration | System.Configuration.ConfigurationErrorsException |
| mscorlib | System.Int64 |
| mscorlib | System.Double |
| mscorlib | System.Single |
| mscorlib | System.Diagnostics.Debugger |
| mscorlib | System.ConsoleSpecialKey |
| mscorlib | System.Threading.Interlocked |
| Microsoft.Build | Microsoft.Build.Evaluation.ToolsetDefinitionLocations |
| Microsoft.Build | Microsoft.Build.Execution.HostServices |
| mscorlib | System.Convert |
| Microsoft.Build | Microsoft.Build.Execution.BuildResultCode |
| Microsoft.Build.Engine | Microsoft.Build.BuildEngine.ToolsetDefinitionLocations |
| mscorlib | System.OperatingSystem |
| mscorlib | System.PlatformID |
| mscorlib | System.Globalization.TextInfo |
| mscorlib | System.IO.Directory |
| Microsoft.Build.Engine | Microsoft.Build.BuildEngine.LocalNode |
| mscorlib | System.OutOfMemoryException |
| mscorlib | System.Security.Principal.WindowsBuiltInRole |
| mscorlib | System.Byte |
| mscorlib | System.Globalization.NumberStyles |
| mscorlib | System.IO.DirectoryInfo |
| mscorlib | System.Runtime.CompilerServices.RuntimeHelpers |
| mscorlib | System.Security.Principal.IdentityReference |
| System.Core | System.IO.Pipes.PipeAccessRights |
| mscorlib | System.Security.AccessControl.AccessControlType |
| mscorlib | System.Security.AccessControl.ObjectSecurity |
| System.Core | System.IO.Pipes.PipeDirection |
| System.Core | System.IO.Pipes.PipeTransmissionMode |
| System.Core | System.IO.Pipes.PipeOptions |
| System.Core | System.IO.HandleInheritability |
| mscorlib | System.Math |
| System.Core | System.IO.Pipes.PipeStreamImpersonationWorker |
| mscorlib | System.Security.Claims.ClaimsIdentity |
| mscorlib | System.Collections.Generic.EqualityComparer`1 |
| mscorlib | System.NotImplementedException |
| mscorlib | System.Collections.Generic.Dictionary`2/KeyCollection |
| mscorlib | System.Collections.Generic.Dictionary`2/ValueCollection |
| mscorlib | System.Collections.Generic.KeyNotFoundException |
| mscorlib | System.IntPtr |
| mscorlib | System.Runtime.InteropServices.Marshal |
| mscorlib | System.IO.PathTooLongException |
| System | System.ComponentModel.Win32Exception |
| System | System.Text.RegularExpressions.Group |
| System | System.Text.RegularExpressions.Capture |
| mscorlib | System.IO.FileSystemInfo |
| System | System.UriKind |
| mscorlib | System.EventHandler |
| mscorlib | System.RuntimeFieldHandle |
| System | System.Diagnostics.Trace |
| mscorlib | System.ArgumentOutOfRangeException |
| mscorlib | System.Runtime.InteropServices.SafeHandle |
| mscorlib | Microsoft.Win32.SafeHandles.SafeWaitHandle |
| mscorlib | System.StackOverflowException |
| mscorlib | System.Threading.ThreadInterruptedException |
| mscorlib | System.AccessViolationException |
| mscorlib | System.Security.XmlSyntaxException |
| System | System.UriFormatException |
| mscorlib | System.TypeLoadException |
| mscorlib | System.MethodAccessException |
| mscorlib | System.MissingMethodException |
| mscorlib | System.Reflection.CustomAttributeFormatException |
| mscorlib | System.Reflection.TargetParameterCountException |
| mscorlib | System.InvalidCastException |
| mscorlib | System.Reflection.AmbiguousMatchException |
| mscorlib | System.Reflection.InvalidFilterCriteriaException |
| mscorlib | System.Reflection.TargetException |
| mscorlib | System.MissingFieldException |
| mscorlib | System.Runtime.Serialization.SerializationException |
| mscorlib | System.ObjectDisposedException |
| mscorlib | System.StringSplitOptions |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildFinishedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.BuildStartedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ProjectFinishedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.ProjectStartedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.TargetStartedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.TaskStartedEventArgs |
| Microsoft.Build.Framework | Microsoft.Build.Framework.TaskFinishedEventArgs |
| mscorlib | System.Security.Policy.Evidence |
| mscorlib | System.Activator |
| Microsoft.Build.Framework | Microsoft.Build.Framework.LoadInSeparateAppDomainAttribute |
| Microsoft.Build.Framework | Microsoft.Build.Framework.RunInSTAAttribute |
| mscorlib | System.Reflection.AssemblyNameFlags |
| mscorlib | System.Threading.ThreadPool |
| System.Core | System.Linq.Enumerable |
| System.Core | System.Linq.IOrderedEnumerable`1 |
Usage
Processing ( 11.75 seconds )
- 9.69 ProcessMemory
- 1.977 CAPE
- 0.075 BehaviorAnalysis
- 0.007 AnalysisInfo
- 0.001 Debug
Signatures ( 0.07 seconds )
- 0.008 ransomware_files
- 0.007 antiav_detectreg
- 0.006 antianalysis_detectfile
- 0.005 ransomware_extensions
- 0.003 antiav_detectfile
- 0.003 infostealer_ftp
- 0.003 territorial_disputes_sigs
- 0.003 ursnif_behavior
- 0.002 antianalysis_detectreg
- 0.002 antivm_vbox_files
- 0.002 infostealer_bitcoin
- 0.002 infostealer_im
- 0.002 infostealer_mail
- 0.002 poullight_files
- 0.002 masquerade_process_name
- 0.001 bot_drive
- 0.001 antidebug_devices
- 0.001 antivm_vbox_keys
- 0.001 antivm_vmware_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 qulab_files
- 0.001 revil_mutexes
- 0.001 modirat_behavior
Reporting ( 0.02 seconds )
- 0.014 CAPASummary
- 0.003 JsonDump
Signatures
Checks available memory
The PE file contains a PDB path
pdbpath: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb
SetUnhandledExceptionFilter detected (possible anti-debug)
Guard pages use detected - possible anti-debugging.
Resumed a thread in another process
thread_resumed: Process msbuild.exe with process ID 6432 resumed a thread in another process with the process ID 6432
Creates RWX memory
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 6432 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Packager\AppData\Local\Temp\MSBuild.exe.config
C:\Users\Packager\AppData\Local\Temp\MSBuild.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\45cef8929f7918524d50f1f75c04b1c3\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\45cef8929f7918524d50f1f75c04b1c3\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e4a1c9189d2b01f018b953e46c80d120\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e4a1c9189d2b01f018b953e46c80d120\mscorlib.ni.dll.aux
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\AppData\Local\Temp
\Device\CNG
C:\Windows\assembly\NativeImages_v4.0.30319_32\MSBuild\*
C:\Users\Packager\AppData\Local\Temp\MSBuild.INI
C:\Users\Packager\AppData\Local\Temp\MSBuild.rsp
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
C:\Users\Packager\AppData\Local\Temp\winnlsres.dll
C:\Windows\System32\winnlsres.dll
C:\Windows\System32\en-US\winnlsres.dll.mui
C:\Windows\sysnative\en-US\winnlsres.dll.mui
C:\Users\Packager\AppData\Local\Temp\*.*proj
C:\Users\Packager\AppData\Local\Temp\*.sln
C:\Users\Packager\AppData\Local\Microsoft
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Packager\AppData\Local\Temp\MSBuild.exe.config
C:\Users\Packager\AppData\Local\Temp\MSBuild.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\45cef8929f7918524d50f1f75c04b1c3\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\45cef8929f7918524d50f1f75c04b1c3\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e4a1c9189d2b01f018b953e46c80d120\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e4a1c9189d2b01f018b953e46c80d120\mscorlib.ni.dll.aux
C:\Users
C:\Users\Packager
C:\Users\Packager\AppData
C:\Users\Packager\AppData\Local
C:\Users\Packager\AppData\Local\Temp
\Device\CNG
C:\Windows\assembly\NativeImages_v4.0.30319_32\MSBuild\*
C:\Users\Packager\AppData\Local\Temp\MSBuild.INI
C:\Users\Packager\AppData\Local\Temp\MSBuild.rsp
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
C:\Users\Packager\AppData\Local\Temp\winnlsres.dll
C:\Windows\System32\winnlsres.dll
C:\Windows\System32\en-US\winnlsres.dll.mui
C:\Windows\sysnative\en-US\winnlsres.dll.mui
C:\Users\Packager\AppData\Local\Temp\*.*proj
C:\Users\Packager\AppData\Local\Temp\*.sln
C:\Users\Packager\AppData\Local\Microsoft
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs
C:\Users\Packager\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\policy\standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSBuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\FeatureSIMD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\AppContext
HKEY_LOCAL_MACHINE\Software\Microsoft\MSBuild\4.0\Performance
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\LevelObjects
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\Levels
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\UrlZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\DefaultLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\SaferFlags
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\policy\standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSBuild.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\FeatureSIMD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\AppContext
HKEY_LOCAL_MACHINE\Software\Microsoft\MSBuild\4.0\Performance
HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\LevelObjects
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\Levels
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\UrlZones
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Hashes
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\UrlZones
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Hashes
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\UrlZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\DefaultLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\SaferFlags
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\FeatureSIMD
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\Levels
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\DefaultLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\SaferFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\FeatureSIMD
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\Levels
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\DefaultLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\SaferFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No CAPE files.
Sorry! No process dumps.
Sorry! No process dumps.