(497155015, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Extracted installer resources to C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}

(497155015, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: *****Init Install Process 8.1.7.21417*****

(497155015, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for policy set on command line

(497155015, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Policy not set on command line - checking for injected

(497155015, +0 ms) Jun 08 11:11:05 [26480]: caExtractResourceToFileW: ResourceName: FIREAMP_POLICY 

(497155015, +0 ms) Jun 08 11:11:05 [26480]: GetBinaryResource: Found FIREAMP_POLICY [size: 33337] 

(497155031, +3 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Found policy - C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\policy00BDA738-DB65-4AA9-A6BC-3834989B1742.xml

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetSystemLanguage: PolicyPath: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\policy00BDA738-DB65-4AA9-A6BC-3834989B1742.xml
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4a4, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1220
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +3 ms) Jun 08 11:11:05 [26480]: caGetSystemLanguage: Detect lang: 4294967295
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Util::GetUserLangId: GetUserDefaultUILanguage returned: 1033
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Util::GetUserLangId: ret: 1033
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy local XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetSystemLanguage: Language ID: 1033
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: .onInit CreateMutexW error result: 0

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Got mutex handle: 1164

(497155031, +0 ms) Jun 08 11:11:05 [26480]: ERROR: caRecursiveDirectoryDelete: Target directory for deletion: , is not cisco owned.  Skipping delete : 127 : The specified procedure could not be found.


(497155031, +1 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Uninstall registry key exists - product already installed

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: GetAllInstallOptions: Checking for install options from config and command line

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: GetAllInstallOptions: Policy: C:\Program Files\Cisco\AMP\policy.xml, Local: C:\Program Files\Cisco\AMP\local.xml

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for overridepolicy [default: 1] [allowed: 0]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/overridepolicy : 1
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: overridepolicy set to 1 (config)

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for desktopicon [default: 0] [allowed: 1]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/desktopicon : 0
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: desktopicon set to 0 (config)

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for sendfile [default: 1] [allowed: 0]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/sendfile : 1
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: sendfile set to 1 (config)

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for versioncheck [default: 0] [allowed: 1]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/versioncheck : 0
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: versioncheck set to 0 (config)

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for noadmin [default: 0] [allowed: 1]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/noadmin : 0
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: noadmin set to 0 (config)

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for skiposcheck [default: 0] [allowed: 1]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/skiposcheck : 0
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155031, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: skiposcheck set to 0 (config)

(497155031, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for skipexprevprereqcheck [default: 0] [allowed: 1]

(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155031, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/skipexprevprereqcheck : 0
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: skipexprevprereqcheck set to 0 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for skiptetra [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/skiptetra : 0
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: skiptetra set to 0 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for skipdfc [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/skipdfc : 0
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: skipdfc set to 0 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for skipuc [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/skipuc : 0
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: skipuc set to 0 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for goldenimage [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/goldenimage : -1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: goldenimage set to 0 (default)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for updateparent [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/updateparent : -1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: updateparent set to 0 (default)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for contextmenu [default: 1] [allowed: 0]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/contextmenu : 1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: contextmenu set to 1 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for startmenu [default: 1] [allowed: 0]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/startmenu : 1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: startmenu set to 1 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for trayicon [default: 1] [allowed: 0]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/trayicon : 1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: trayicon set to 1 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for overrideinstpathlength [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/overrideinstpathlength : 0
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: overrideinstpathlength set to 0 (config)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for renameinstalldir [default: 1] [allowed: 0]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/renameinstalldir : -1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: renameinstalldir set to 1 (default)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for skipfoldercleanup [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/skipfoldercleanup : -1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: skipfoldercleanup set to 0 (default)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for kb4072699 [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/kb4072699 : -1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: kb4072699 set to 0 (default)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: Checking for overrideupgradefailure [default: 0] [allowed: 1]

(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4cc, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1224
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetInstallOption: config/install/switches/overrideupgradefailure : -1
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy global XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::InternalFree unable to destroy policy XML instance
(497155046, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: overrideupgradefailure set to 0 (default)

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: GetPreviousVersion - option: 0

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: GetPreviousVersion - found version: 7.5.3.20938

(497155046, +0 ms) Jun 08 11:11:05 [26480]: caGetServiceName: InstallPath: C:\Program Files\Cisco\AMP\7.5.3.20938
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem0x4c8, 0, 8
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateSharedMem created shared mem
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::CreateGlobalLock init global lock: 1228
(497155046, +0 ms) Jun 08 11:11:05 [26480]: Config::Load invoking LoadVerifyAndGetIfc
(497155062, +2 ms) Jun 08 11:11:05 [26480]: InitCertStore g_lCertInitOnce: 0
(497155062, +0 ms) Jun 08 11:11:05 [26480]: InitCertStore g_lCertInitOnce: 1 init cert
(497155062, +0 ms) Jun 08 11:11:05 [26480]: AddSignerCert invoked... status: 1
(497155062, +3 ms) Jun 08 11:11:05 [26480]: caServiceExists: checking for CiscoAMP

(497155062, +0 ms) Jun 08 11:11:05 [26480]: caServiceExists: Service exists
(497155062, +0 ms) Jun 08 11:11:05 [26480]: DeInitCertStore invoked...
(497155062, +0 ms) Jun 08 11:11:05 [26480]: caGetServiceName: dwRet: 0
(497155062, +0 ms) Jun 08 11:11:05 [26480]: caLogMessageW: GetServiceName: CiscoAMP 

(497155062, +0 ms) Jun 08 11:11:05 [26480]: caExtractResourceToStringW: ResourceName: FIREAMP_AFFID

(497155062, +0 ms) Jun 08 11:11:05 [26480]: GetBinaryResource: FindResource Failed [err: 1814] 

(497155062, +0 ms) Jun 08 11:11:05 [26480]: caExtractResourceToStringW: Attempting to extract using previous method

(497155062, +0 ms) Jun 08 11:11:05 [26480]: caExtractW: extracting 1 

(497155062, +0 ms) Jun 08 11:11:05 [26480]: caExtractW: entering parent mode 1024 

(497155062, +0 ms) Jun 08 11:11:05 [26480]: caExtractW: found installer exe C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\amp_Arbor.exe
(497156218, +1155 ms) Jun 08 11:11:06 [3516]: caLogMessageW: *****Beginning Install Process 8.1.7.21417*****

(497156218, +0 ms) Jun 08 11:11:06 [3516]: caLogMessageW: Extracting event resources

(497156218, +0 ms) Jun 08 11:11:06 [3516]: RecursiveDirectoryDeleteCallback: Directory Entered:  C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events
(497156218, +0 ms) Jun 08 11:11:06 [3516]: ERROR: Util::RecursiveDirSearch unable to enumerate base folder: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\* : 3 : The system cannot find the path specified.


(497156218, +0 ms) Jun 08 11:11:06 [3516]: caRecursiveDirectoryDelete: could not delete inuse directory, marking for delete on reboot: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events
(497156312, +105 ms) Jun 08 11:11:06 [3516]: caLogMessageW: Extracting Casetup resources

(497156312, +0 ms) Jun 08 11:11:06 [3516]: caLogMessageW: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\casetup32.exe

(497156312, +0 ms) Jun 08 11:11:06 [3516]: RecursiveDirectoryDeleteCallback: Directory Entered:  C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup
(497156312, +0 ms) Jun 08 11:11:06 [3516]: ERROR: Util::RecursiveDirSearch unable to enumerate base folder: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\* : 3 : The system cannot find the path specified.


(497156312, +0 ms) Jun 08 11:11:06 [3516]: caRecursiveDirectoryDelete: could not delete inuse directory, marking for delete on reboot: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup
(497156359, +33 ms) Jun 08 11:11:06 [3516]: caAddDllDirectory: Working Dir: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417
(497156359, +0 ms) Jun 08 11:11:06 [3516]: caAddDllDirectory: AddDllDirectory success
(497156359, +0 ms) Jun 08 11:11:06 [3516]: caAddDllDirectory: Ret: 0, DirCookie: 0x39c1050
(497156359, +0 ms) Jun 08 11:11:06 [3516]: caDynamicTraceInit: Working Dir: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\
(497156359, +2 ms) Jun 08 11:11:06 [3516]: caServiceExists: checking for gzflt

(497156359, +0 ms) Jun 08 11:11:06 [3516]: caServiceExists: Service does not exist

(497156359, +0 ms) Jun 08 11:11:06 [3516]: caServiceExists: checking for vlflt

(497156359, +0 ms) Jun 08 11:11:06 [3516]: caServiceExists: Service does not exist

(497156359, +0 ms) Jun 08 11:11:07 [3516]: caLogMessageW: OEM detected 0

(497156359, +1 ms) Jun 08 11:11:07 [3516]: caIsNodeIsolationActive: Node Isolation is not active, allowing uninstall.
(497156359, +0 ms) Jun 08 11:11:07 [3516]: caLogMessageW: C:\Program Files\Cisco\AMP\7.5.3.20938

(497156359, +0 ms) Jun 08 11:11:07 [3516]: caLogMessageW: sfc.exe

(497156359, +0 ms) Jun 08 11:11:07 [3516]: caStartAgentDebugLogging: Stating Debug Logging
(497156359, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeSend: Sending pipe auth
(497156359, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: waiting on pipe event handle
(497156359, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: WaitForSingleObject: 0
(497156359, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: WaitForSingleObject: WAIT_OBJECT_0
(497156359, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: wrote 1072 bytes
(497156875, +507 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: waiting on pipe event handle
(497156875, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: WaitForSingleObject: 0
(497156875, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: WaitForSingleObject: WAIT_OBJECT_0
(497156875, +0 ms) Jun 08 11:11:07 [3516]: ClientPipeWrite2: wrote 1072 bytes
(497157390, +509 ms) Jun 08 11:11:08 [3516]: caStartAgentDebugLogging: ClientPipeSend success
(497157390, +2 ms) Jun 08 11:11:08 [3516]: caPublishUpdateStartedEvent: [WorkingDir: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\] [CurrentVersion: 7.5.3.20938] [UpdateVersion: 8.1.7.21417] [UpdateType: 0]
(497157390, +0 ms) Jun 08 11:11:08 [3516]: Config::CreateSharedMem0x628, 0, 8
(497157390, +0 ms) Jun 08 11:11:08 [3516]: Config::CreateSharedMem created shared mem
(497157390, +0 ms) Jun 08 11:11:08 [3516]: Config::CreateGlobalLock init global lock: 1580
(497157390, +0 ms) Jun 08 11:11:08 [3516]: Config::Load invoking LoadVerifyAndGetIfc
(497157390, +2 ms) Jun 08 11:11:08 [3516]: InitCertStore g_lCertInitOnce: 0
(497157390, +0 ms) Jun 08 11:11:08 [3516]: InitCertStore g_lCertInitOnce: 1 init cert
(497157390, +0 ms) Jun 08 11:11:08 [3516]: AddSignerCert invoked... status: 1
(497157390, +2 ms) Jun 08 11:11:08 [3516]: ThrottleUpdateEvent: Local update id: -1, Policy update id: 1684335984, Throttle: 0
(497157390, +0 ms) Jun 08 11:11:08 [3516]: Config::Load invoking LoadVerifyAndGetIfc
(497157390, +6 ms) Jun 08 11:11:08 [3516]: AmpkitSubscriptionThread::AmpkitSubscriptionThread: Exit
(497157390, +0 ms) Jun 08 11:11:08 [3516]: AmpkitSubscriptionThread::AddObserver: Number of observers 1
(497157390, +0 ms) Jun 08 11:11:08 [3516]: ProxyDiscovery::RegisterForProxyNotifications: Added consumer 03A41F20
(497157390, +0 ms) Jun 08 11:11:08 [21420]: AmpkitSubscriptionThread::NotificationWorker: Waiting on queue
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::GetSecureProxyInfoENTER
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::GetSecureProxyInfoexit (0)
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery method: 2, size: 0, status: 0
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::GetSystemProxyInfo 1, (null), (null)
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery method: 1, size: 0, status: 0
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery method: 3, size: 0, status: 0
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::GetAutoProxyInfo 0x1, 0x1, (null)
(497157406, +1 ms) Jun 08 11:11:08 [3516]: Proxy::GetAutoProxyInfo unable to get proxy using WPAD/PAC file at url: (null), 12180
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery method: 4, size: 0, status: 0
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::GetAutoProxyInfo 0x1, 0x2, (null)
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::GetAutoProxyInfo unable to get proxy using WPAD/PAC file at url: (null), 12180
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery method: 5, size: 0, status: 0
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery: Add Direct Connection to discovery list
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Proxy::Discovery method: 0, size: 1, status: 1
(497157406, +0 ms) Jun 08 11:11:08 [3516]: ProxyDiscovery::StartProxyDiscoverySync: Discover 1 proxies
(497157406, +0 ms) Jun 08 11:11:08 [3516]: ERROR: ConvertProtcolStringToEnum: Conversion to proxy proto enum failed

(497157406, +0 ms) Jun 08 11:11:08 [3516]: AmpkitProxyTester::TestProxyUsingConfig: Setting up test for proxy :0 for registration
(497157406, +8 ms) Jun 08 11:11:08 [3516]: Config::Set config/agent/uuid 60431db2-43f6-49eb-8258-574cea094317 1
(497157406, +4 ms) Jun 08 11:11:08 [3516]: Config::Set config/janus/install/token 3769ee6f-4319-4d33-a3eb-8eecd1a2d369 1
(497157406, +0 ms) Jun 08 11:11:08 [3516]: AmpkitConfigReader::GetLegacyClientKeypair: no legacy client keypair available, registering as a new connector
(497157406, +0 ms) Jun 08 11:11:08 [3516]: AmpkitConfigReader::PopulateAgentIdentity: Failed to get legacy_client_keypair
(497157406, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: pTrustedCertificateList: 03A41FE0, 4
(497157421, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=(c) 2007 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G2
(497157421, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=Certification Services Division; OU=(c) 2008 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G3
(497157421, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=BM; O=QuoVadis Limited; CN=QuoVadis Root CA 2
(497157421, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=US; O=IdenTrust; CN=IdenTrust Commercial Root CA 1
(497157421, +6 ms) Jun 08 11:11:08 [3516]: [AMPKIT-WIN][http_client.c@126]: supports mutual auth, both client cert and key pair provided
(497157421, +0 ms) Jun 08 11:11:08 [3516]: AmpkitProxyHelper::LoadProxyFromConfig proxy server is NULL
(497157421, +0 ms) Jun 08 11:11:08 [3516]: AmpkitProxyHelper::LoadProxyFromConfig: Direct connection detected
(497157421, +0 ms) Jun 08 11:11:08 [3516]: AmpkitProxyTester::TestProxyUsingConfig: Testing Proxy :0 for registration
(497157421, +0 ms) Jun 08 11:11:08 [3516]: [AMPKIT-WIN][http_client.c@664]: transfer progress timeout changed to: 15.00
(497157421, +0 ms) Jun 08 11:11:08 [3516]: [AMPKIT-WIN][http_client.c@677]: transfer timeout limit changed to: 30.00
(497157578, +159 ms) Jun 08 11:11:08 [3516]: AmpkitProxyTester::TestProxyUsingConfig: Proxy Test Status: 0
(497157578, +0 ms) Jun 08 11:11:08 [3516]: AmpkitProxyHelper::SaveProxyToConfig: Enter
(497157578, +3 ms) Jun 08 11:11:08 [3516]: AmpkitProxyHelper::DeleteConfigProxyInfo deleted proxy settings. result: success
(497157578, +0 ms) Jun 08 11:11:08 [3516]: Config::SetW config/proxy/type  0
(497157593, +4 ms) Jun 08 11:11:08 [3516]: Config::SetDword config/proxy/tunnel 0 0
(497157593, +4 ms) Jun 08 11:11:08 [3516]: Config::SetDword config/proxy/discmode 0 0
(497157593, +4 ms) Jun 08 11:11:08 [3516]: Config::SetW config/proxy/server  0
(497157593, +3 ms) Jun 08 11:11:08 [3516]: Config::Load invoking LoadVerifyAndGetIfc
(497157609, +6 ms) Jun 08 11:11:08 [3516]: Successfully configured endpoints: https://mgmt.amp.cisco.com/agent/v1/ https://intake.amp.cisco.com/event/ 
(497157609, +0 ms) Jun 08 11:11:08 [3516]: SendEvent: eid: 553648135 json: {"itk":"4a0483a2-556f-4f48-a1f0-6d7183b15902","pua":0,"puc":"7.5.3.20938","puid":"1684335984","puu":"8.1.7.21417"}
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::Init: POST: https://intake.amp.cisco.com/event/
(497157609, +0 ms) Jun 08 11:11:08 [3516]: Util::GetOsVersion 2, 10, 0, 1
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: fg: 7e9d7d2a-b554-50f4-3ebb-d275f6f9aa30
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: ag: 60431db2-43f6-49eb-8258-574cea094317
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: bg: 925f4af8-8d5b-4c3d-9362-89859e5dfd62
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: id: 497157609
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: tid: 553648135
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: ts: 133307106682385109
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: data: {"itk":"4a0483a2-556f-4f48-a1f0-6d7183b15902","pua":0,"puc":"7.5.3.20938","puid":"1684335984","puu":"8.1.7.21417"}
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: tsn: 133307106682385109
(497157609, +0 ms) Jun 08 11:11:08 [3516]: ERROR: AmpkitHttp::GenerateSections: No Sections

(497157609, +3 ms) Jun 08 11:11:08 [3516]: Config::Set config/agent/uuid 60431db2-43f6-49eb-8258-574cea094317 1
(497157609, +3 ms) Jun 08 11:11:08 [3516]: Config::Set config/janus/install/token 3769ee6f-4319-4d33-a3eb-8eecd1a2d369 1
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitConfigReader::GetLegacyClientKeypair: no legacy client keypair available, registering as a new connector
(497157609, +0 ms) Jun 08 11:11:08 [3516]: AmpkitConfigReader::PopulateAgentIdentity: Failed to get legacy_client_keypair
(497157609, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: pTrustedCertificateList: 06AE95C0, 4
(497157609, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=(c) 2007 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G2
(497157609, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=Certification Services Division; OU=(c) 2008 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G3
(497157609, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=BM; O=QuoVadis Limited; CN=QuoVadis Root CA 2
(497157609, +0 ms) Jun 08 11:11:08 [3516]: Config::LoadCerts: adding certificate from config C=US; O=IdenTrust; CN=IdenTrust Commercial Root CA 1
(497157625, +5 ms) Jun 08 11:11:08 [3516]: [AMPKIT-WIN][http_client.c@126]: supports mutual auth, both client cert and key pair provided
(497157625, +0 ms) Jun 08 11:11:08 [3516]: AmpkitProxyHelper::LoadProxyFromConfig: Direct connection detected
(497157765, +144 ms) Jun 08 11:11:08 [3516]: AmpkitHttp::MakeRequest: Response [ 200 ] Len [ 1 ]
(497157765, +0 ms) Jun 08 11:11:08 [3516]: SendEvent: WriteEvent returned: 0x00000000
(497157765, +0 ms) Jun 08 11:11:08 [3516]: ProxyDiscovery::UnregisterForProxyNotifications: Removed consumer 03A41F20
(497157765, +0 ms) Jun 08 11:11:08 [3516]: AmpkitRegistrationHandler::RegistrationStop: Enter
(497157765, +0 ms) Jun 08 11:11:08 [3516]: ERROR: AmpkitRegistrationHandler::RegistrationStop:  no registration handle, call ProvisionClient first

(497157765, +0 ms) Jun 08 11:11:08 [3516]: ERROR: AmpkitRegistrationHandler::ReleaseRegistrationHandle:  no registration handle, call ProvisionClient first

(497157875, +100 ms) Jun 08 11:11:08 [21420]: AmpkitSubscriptionThread::NotificationWorker: Exit
(497157875, +0 ms) Jun 08 11:11:08 [3516]: AmpkitSubscriptionThread::~AmpkitSubscriptionThread: Exit
(497157875, +1 ms) Jun 08 11:11:08 [3516]: caLogMessageW: Running Pre-Install Verification...

(497157875, +0 ms) Jun 08 11:11:08 [3516]: caLogMessageW: Product already installed, checking affiliate guid

(497157875, +0 ms) Jun 08 11:11:08 [3516]: caGetInstalledAffiliateGuid: InstallPath: C:\Program Files\Cisco\AMP\7.5.3.20938
(497157875, +0 ms) Jun 08 11:11:08 [3516]: Config::Load invoking LoadVerifyAndGetIfc
(497157875, +6 ms) Jun 08 11:11:08 [3516]: caGetInstalledAffiliateGuid: dwRet: 0
(497157875, +0 ms) Jun 08 11:11:08 [3516]: caLogMessageW: Affiliate: 7e9d7d2a-b554-50f4-3ebb-d275f6f9aa30, Installed Affiliate: 7e9d7d2a-b554-50f4-3ebb-d275f6f9aa30

(497157875, +0 ms) Jun 08 11:11:08 [3516]: Util::VerifyOsVersion testing against Product Type: 1 Major 10 Minor 0 SP 0
(497157875, +0 ms) Jun 08 11:11:08 [3516]: Util::VerifyOsVersion: ret 1
(497157875, +0 ms) Jun 08 11:11:08 [3516]: Util::VerifyOsVersion testing against Product Type: 1 Major 10 Minor 0 SP 0
(497157875, +0 ms) Jun 08 11:11:08 [3516]: Util::VerifyOsVersion also testing against Build Number: 17604
(497157875, +0 ms) Jun 08 11:11:08 [3516]: Util::VerifyOsVersion: ret 1
(497157875, +3 ms) Jun 08 11:11:08 [3516]: caIsSha256ExtendedSigningSupportedKB3033929: check for KB3033929 is only relevant on Win 7 x64
(497157875, +0 ms) Jun 08 11:11:08 [3516]: caLogMessageW: ACS Verification attempt 1 of 5

(497157890, +4 ms) Jun 08 11:11:08 [3516]: caLogMessageW: Code Signing Load Status: error

(497158906, +1012 ms) Jun 08 11:11:09 [3516]: caLogMessageW: ACS Verification attempt 2 of 5

(497158906, +3 ms) Jun 08 11:11:09 [3516]: caLogMessageW: Code Signing Load Status: error

(497159921, +1015 ms) Jun 08 11:11:10 [3516]: caLogMessageW: ACS Verification attempt 3 of 5

(497159921, +6 ms) Jun 08 11:11:10 [3516]: caLogMessageW: Code Signing Load Status: error

(497160937, +1009 ms) Jun 08 11:11:11 [3516]: caLogMessageW: ACS Verification attempt 4 of 5

(497160937, +2 ms) Jun 08 11:11:11 [3516]: caLogMessageW: Code Signing Load Status: error

(497161937, +1005 ms) Jun 08 11:11:12 [3516]: caLogMessageW: ACS Verification attempt 5 of 5

(497161953, +4 ms) Jun 08 11:11:12 [3516]: caLogMessageW: Code Signing Load Status: error

(497164531, +2580 ms) Jun 08 11:11:15 [3516]: caPublishUpdateEnd: [WorkingDir: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\] [CurrentVersion: 7.5.3.20938] [UpdateVersion: 8.1.7.21417] [ReturnCode: 16019] [ExpectedRebootCode: 0] [versionedInstallDir: C:\Program Files\Cisco\AMP\8.1.7.21417\]
(497164531, +0 ms) Jun 08 11:11:15 [3516]: Config::Load invoking LoadVerifyAndGetIfc
(497164531, +5 ms) Jun 08 11:11:15 [3516]: Config::Load invoking LoadVerifyAndGetIfc
(497164546, +5 ms) Jun 08 11:11:15 [3516]: AmpkitSubscriptionThread::AmpkitSubscriptionThread: Exit
(497164546, +0 ms) Jun 08 11:11:15 [3516]: AmpkitSubscriptionThread::AddObserver: Number of observers 1
(497164546, +0 ms) Jun 08 11:11:15 [3516]: ProxyDiscovery::RegisterForProxyNotifications: Added consumer 06AE8980
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetSecureProxyInfoENTER
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetSecureProxyInfoexit (0)
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery method: 2, size: 0, status: 0
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetSystemProxyInfo 1, (null), (null)
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery method: 1, size: 0, status: 0
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery method: 3, size: 0, status: 0
(497164546, +0 ms) Jun 08 11:11:15 [17996]: AmpkitSubscriptionThread::NotificationWorker: Waiting on queue
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetAutoProxyInfo 0x1, 0x1, (null)
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetAutoProxyInfo unable to get proxy using WPAD/PAC file at url: (null), 12180
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery method: 4, size: 0, status: 0
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetAutoProxyInfo 0x1, 0x2, (null)
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::GetAutoProxyInfo unable to get proxy using WPAD/PAC file at url: (null), 12180
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery method: 5, size: 0, status: 0
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery: Add Direct Connection to discovery list
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Proxy::Discovery method: 0, size: 1, status: 1
(497164546, +0 ms) Jun 08 11:11:15 [3516]: ProxyDiscovery::StartProxyDiscoverySync: Discover 1 proxies
(497164546, +0 ms) Jun 08 11:11:15 [3516]: ERROR: ConvertProtcolStringToEnum: Conversion to proxy proto enum failed

(497164546, +0 ms) Jun 08 11:11:15 [3516]: AmpkitProxyTester::TestProxyUsingConfig: Setting up test for proxy :0 for registration
(497164546, +3 ms) Jun 08 11:11:15 [3516]: Config::Set config/agent/uuid 60431db2-43f6-49eb-8258-574cea094317 1
(497164546, +4 ms) Jun 08 11:11:15 [3516]: Config::Set config/janus/install/token 3769ee6f-4319-4d33-a3eb-8eecd1a2d369 1
(497164546, +0 ms) Jun 08 11:11:15 [3516]: AmpkitConfigReader::GetLegacyClientKeypair: no legacy client keypair available, registering as a new connector
(497164546, +0 ms) Jun 08 11:11:15 [3516]: AmpkitConfigReader::PopulateAgentIdentity: Failed to get legacy_client_keypair
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: pTrustedCertificateList: 06AE8A00, 4
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=(c) 2007 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G2
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=Certification Services Division; OU=(c) 2008 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G3
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=BM; O=QuoVadis Limited; CN=QuoVadis Root CA 2
(497164546, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=US; O=IdenTrust; CN=IdenTrust Commercial Root CA 1
(497164562, +5 ms) Jun 08 11:11:15 [3516]: [AMPKIT-WIN][http_client.c@126]: supports mutual auth, both client cert and key pair provided
(497164562, +0 ms) Jun 08 11:11:15 [3516]: AmpkitProxyHelper::LoadProxyFromConfig proxy server is NULL
(497164562, +0 ms) Jun 08 11:11:15 [3516]: AmpkitProxyHelper::LoadProxyFromConfig: Direct connection detected
(497164562, +0 ms) Jun 08 11:11:15 [3516]: AmpkitProxyTester::TestProxyUsingConfig: Testing Proxy :0 for registration
(497164562, +0 ms) Jun 08 11:11:15 [3516]: [AMPKIT-WIN][http_client.c@664]: transfer progress timeout changed to: 15.00
(497164562, +0 ms) Jun 08 11:11:15 [3516]: [AMPKIT-WIN][http_client.c@677]: transfer timeout limit changed to: 30.00
(497164687, +135 ms) Jun 08 11:11:15 [3516]: AmpkitProxyTester::TestProxyUsingConfig: Proxy Test Status: 0
(497164687, +0 ms) Jun 08 11:11:15 [3516]: AmpkitProxyHelper::SaveProxyToConfig: Enter
(497164687, +3 ms) Jun 08 11:11:15 [3516]: AmpkitProxyHelper::DeleteConfigProxyInfo deleted proxy settings. result: success
(497164687, +0 ms) Jun 08 11:11:15 [3516]: Config::SetW config/proxy/type  0
(497164703, +5 ms) Jun 08 11:11:15 [3516]: Config::SetDword config/proxy/tunnel 0 0
(497164718, +25 ms) Jun 08 11:11:15 [3516]: Config::SetDword config/proxy/discmode 0 0
(497164750, +18 ms) Jun 08 11:11:15 [3516]: Config::SetW config/proxy/server  0
(497164765, +14 ms) Jun 08 11:11:15 [3516]: Config::ShouldReload reloading due to local: 1381, 1390
(497164765, +0 ms) Jun 08 11:11:15 [3516]: Config::ReLoad invoking LoadVerifyAndGetIfc
(497164765, +0 ms) Jun 08 11:11:15 [3516]: Config::ReLoad successfully for config:  0x3a9b0d0
(497164765, +0 ms) Jun 08 11:11:15 [3516]: Successfully configured endpoints: https://mgmt.amp.cisco.com/agent/v1/ https://intake.amp.cisco.com/event/ 
(497164765, +0 ms) Jun 08 11:11:15 [3516]: SendEvent: eid: 553648137 json: {"ecd":16019,"puc":"7.5.3.20938","puid":"1684335984","puu":"8.1.7.21417"}
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::Init: POST: https://intake.amp.cisco.com/event/
(497164765, +0 ms) Jun 08 11:11:15 [3516]: Util::GetOsVersion 2, 10, 0, 1
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: fg: 7e9d7d2a-b554-50f4-3ebb-d275f6f9aa30
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: ag: 60431db2-43f6-49eb-8258-574cea094317
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: bg: 925f4af8-8d5b-4c3d-9362-89859e5dfd62
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: id: 497164765
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: tid: 553648137
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: ts: 133307106753918714
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: data: {"ecd":16019,"puc":"7.5.3.20938","puid":"1684335984","puu":"8.1.7.21417"}
(497164765, +0 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::EncodeAndAddNameValueToMap: tsn: 133307106753918714
(497164765, +0 ms) Jun 08 11:11:15 [3516]: ERROR: AmpkitHttp::GenerateSections: No Sections

(497164781, +16 ms) Jun 08 11:11:15 [3516]: Config::Set config/agent/uuid 60431db2-43f6-49eb-8258-574cea094317 1
(497164796, +20 ms) Jun 08 11:11:15 [3516]: Config::Set config/janus/install/token 3769ee6f-4319-4d33-a3eb-8eecd1a2d369 1
(497164796, +0 ms) Jun 08 11:11:15 [3516]: AmpkitConfigReader::GetLegacyClientKeypair: no legacy client keypair available, registering as a new connector
(497164796, +0 ms) Jun 08 11:11:15 [3516]: AmpkitConfigReader::PopulateAgentIdentity: Failed to get legacy_client_keypair
(497164796, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: pTrustedCertificateList: 06B29050, 4
(497164796, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=(c) 2007 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G2
(497164796, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=US; O=thawte, Inc.; OU=Certification Services Division; OU=(c) 2008 thawte, Inc. - For authorized use only; CN=thawte Primary Root CA - G3
(497164796, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=BM; O=QuoVadis Limited; CN=QuoVadis Root CA 2
(497164796, +0 ms) Jun 08 11:11:15 [3516]: Config::LoadCerts: adding certificate from config C=US; O=IdenTrust; CN=IdenTrust Commercial Root CA 1
(497164796, +5 ms) Jun 08 11:11:15 [3516]: [AMPKIT-WIN][http_client.c@126]: supports mutual auth, both client cert and key pair provided
(497164796, +0 ms) Jun 08 11:11:15 [3516]: AmpkitProxyHelper::LoadProxyFromConfig: Direct connection detected
(497164953, +144 ms) Jun 08 11:11:15 [3516]: AmpkitHttp::MakeRequest: Response [ 200 ] Len [ 1 ]
(497164953, +1 ms) Jun 08 11:11:15 [3516]: SendEvent: WriteEvent returned: 0x00000000
(497164953, +0 ms) Jun 08 11:11:15 [3516]: ProxyDiscovery::UnregisterForProxyNotifications: Removed consumer 06AE8980
(497164953, +0 ms) Jun 08 11:11:15 [3516]: AmpkitRegistrationHandler::RegistrationStop: Enter
(497164953, +0 ms) Jun 08 11:11:15 [3516]: ERROR: AmpkitRegistrationHandler::RegistrationStop:  no registration handle, call ProvisionClient first

(497164953, +0 ms) Jun 08 11:11:15 [3516]: ERROR: AmpkitRegistrationHandler::ReleaseRegistrationHandle:  no registration handle, call ProvisionClient first

(497165046, +100 ms) Jun 08 11:11:15 [17996]: AmpkitSubscriptionThread::NotificationWorker: Exit
(497165046, +0 ms) Jun 08 11:11:15 [3516]: AmpkitSubscriptionThread::~AmpkitSubscriptionThread: Exit
(497165046, +0 ms) Jun 08 11:11:15 [3516]: UpdateLocalEventThrottleViaPipe: Installed version: 7.5
(497165046, +0 ms) Jun 08 11:11:15 [3516]: caSendUpdateLocalXmlPipeMsg: ReturnCode: 16019
(497165046, +0 ms) Jun 08 11:11:15 [3516]: ClientPipeSend: Sending pipe auth
(497165046, +0 ms) Jun 08 11:11:15 [3516]: ClientPipeWrite2: waiting on pipe event handle
(497165046, +0 ms) Jun 08 11:11:15 [3516]: ClientPipeWrite2: WaitForSingleObject: 0
(497165046, +0 ms) Jun 08 11:11:15 [3516]: ClientPipeWrite2: WaitForSingleObject: WAIT_OBJECT_0
(497165046, +0 ms) Jun 08 11:11:15 [3516]: ClientPipeWrite2: wrote 1072 bytes
(497165562, +509 ms) Jun 08 11:11:16 [3516]: ClientPipeWrite2: waiting on pipe event handle
(497165562, +0 ms) Jun 08 11:11:16 [3516]: ClientPipeWrite2: WaitForSingleObject: 0
(497165562, +0 ms) Jun 08 11:11:16 [3516]: ClientPipeWrite2: WaitForSingleObject: WAIT_OBJECT_0
(497165562, +0 ms) Jun 08 11:11:16 [3516]: ClientPipeWrite2: wrote 1072 bytes
(497166078, +514 ms) Jun 08 11:11:16 [3516]: caSendUpdateLocalXmlPipeMsg: ClientPipeSend returned: 0
(497166078, +0 ms) Jun 08 11:11:16 [3516]: ERROR: RemoveUpdateFromXpathInLocal: SetCurrentDirectory failed : 2 : The system cannot find the file specified.


(497167281, +1217 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\iprd_8372C86A-4FFC-4BBA-BD73-49289EB4C5A2.dll
(497167281, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167281, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile:DeleteFile failed : 5 : Access is denied.


(497167281, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Attempting with MoveFileEx
(497167281, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +2 ms) Jun 08 11:11:17 [26480]: RecursiveDirectoryDeleteCallback: Directory Entered:  C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events
(497167296, +0 ms) Jun 08 11:11:17 [26480]: RecursiveDirectoryDeleteCallback: Directory Entered:  C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\dak.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\dcf.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\dhr.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\dll_hardware.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\dut.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile:DeleteFile failed : 5 : Access is denied.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Attempting with MoveFileEx
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\dxm.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\global.xml
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +1 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\libcrypto-1_1.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\libssl-1_1.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\msvcp140.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\msvcp140_1.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\msvcp140_2.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\pthreadVC2.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\ucrtbase.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417\vcruntime140.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\local.old
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\local.xml
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\policy.xml
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: caRecursiveDirectoryDelete: could not delete inuse directory, marking for delete on reboot: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events\8.1.7.21417
(497167296, +0 ms) Jun 08 11:11:17 [26480]: caRecursiveDirectoryDelete: could not delete inuse directory, marking for delete on reboot: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\FA_Events
(497167296, +2 ms) Jun 08 11:11:17 [26480]: RecursiveDirectoryDeleteCallback: Directory Entered:  C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\casetup32.exe
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\dut.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\libcrypto-1_1.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\msvcp140.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\msvcp140_1.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\msvcp140_2.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\ucrtbase.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: Deleting fileName: C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup\vcruntime140.dll
(497167296, +0 ms) Jun 08 11:11:17 [26480]: ERROR: CommonDeleteFile: Wow64DisableWow64FsRedirection failed : 998 : Invalid access to memory location.


(497167296, +0 ms) Jun 08 11:11:17 [26480]: CommonDeleteFile: ret: 0
(497167296, +0 ms) Jun 08 11:11:17 [26480]: caRecursiveDirectoryDelete: Deleted Directory C:\Users\AGENZE~1\AppData\Local\Temp\AMP.Installer\{82373DD8-07F8-8237-9F96A19F-EAA02EA1CFDD1EDB}\Casetup
(497167328, +27 ms) Jun 08 11:11:17 [26480]: CertMgrLoader::UnloadCertMgr certs unloaded from certificate manager
(497167328, +0 ms) Jun 08 11:11:17 [26480]: DeInitCertStore invoked...