Advisory: Sophos Endpoint "Your connection isn't private" after reboot. Policy settings can be returned to normal. See: KB-000045954 for the latest updates.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failed to install component NTP64: 8000ffff

Sophos NTP64 installation fails on Server 2019 Standard, see error log below:

2023-10-16T12:13:04.0582833Z INFO : Running C:\\Users\\FBS_AD~1\\AppData\\Local\\Temp\\SophosSetup-1000217844\\Setup.exe
2023-10-16T12:13:04.0582833Z INFO : Stage 1 command-line options:
2023-10-16T12:13:04.0592657Z INFO : ---
2023-10-16T12:13:04.0592657Z INFO : Quiet mode on: 0
2023-10-16T12:13:04.0592657Z INFO : Bypass ownership check: 0
2023-10-16T12:13:04.0592657Z INFO : Bypass ACS check: 0
2023-10-16T12:13:04.0592657Z INFO : Automatic Proxy detection disabled: 0
2023-10-16T12:13:04.0602664Z INFO : No feedback mode on: 0
2023-10-16T12:13:04.0602664Z INFO : Dump feedback enabled: 0
2023-10-16T12:13:04.0632668Z INFO : Bypass competitor removal: 0
2023-10-16T12:13:04.0632668Z INFO : Using CRT catalog file path: --
2023-10-16T12:13:04.0642658Z INFO : Only register endpoint with Central: 0
2023-10-16T12:13:04.0642658Z INFO : Log messages between endpoint and Central: 0
2023-10-16T12:13:04.0642658Z INFO : Log command-line passed to executables: 0
2023-10-16T12:13:04.0642658Z INFO : Using custom server that hosts the installer stage2 filename: --
2023-10-16T12:13:04.0642658Z INFO : Using cloud group: --
2023-10-16T12:13:04.0652656Z INFO : Overriding computer name: --
2023-10-16T12:13:04.0652656Z INFO : Overriding computer description: --
2023-10-16T12:13:04.0652656Z INFO : Overriding domain name: --
2023-10-16T12:13:04.0652656Z INFO : Language will be set to: --
2023-10-16T12:13:04.0652656Z INFO : Using message relays: --
2023-10-16T12:13:04.0662647Z INFO : Proxy address: --
2023-10-16T12:13:04.0662647Z INFO : Proxy user name: --
2023-10-16T12:13:04.0662647Z INFO : Using custom customer token: --
2023-10-16T12:13:04.0662647Z INFO : Using specified products: --
2023-10-16T12:13:04.0662647Z INFO : Using certificates from the program data folder: 0
2023-10-16T12:13:04.0662647Z INFO : Setting non-persistent image: 0
2023-10-16T12:13:04.0672707Z INFO : Setting gold image: 0
2023-10-16T12:13:04.0672707Z INFO : MCS registration timeout for golden image: --
2023-10-16T12:13:04.0672707Z INFO : Using custom customer ID: --
2023-10-16T12:13:04.0672707Z INFO : Using specified user ID: --
2023-10-16T12:13:04.0682696Z INFO : Using local install source: --
2023-10-16T12:13:04.0682696Z INFO : Invoked as part of SEC migration: 0
2023-10-16T12:13:04.0682696Z INFO : ---
2023-10-16T12:13:04.0732659Z INFO : Detected architecture: 2
2023-10-16T12:13:04.0742672Z INFO : Using x86 program files for stage 2
2023-10-16T12:13:04.0742672Z INFO : Target path: C:\\Program Files (x86)\\Sophos\\CloudInstaller
2023-10-16T12:13:04.2252676Z INFO : About to delete: C:\\Program Files (x86)\\Sophos\\CloudInstaller
2023-10-16T12:13:04.2252676Z INFO : Folder not present, nothing to delete
2023-10-16T12:13:04.2252676Z INFO : Running on x64, requesting x86 Stage2
2023-10-16T12:13:04.2262680Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/14de7f54-d0ce-435b-afda-c43d60177852
2023-10-16T12:13:04.2682707Z INFO : Did not discover an URL for a PAC file
2023-10-16T12:13:04.2692681Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2023-10-16T12:13:04.2702703Z INFO : Set security protocol: 00000800
2023-10-16T12:13:04.2702703Z INFO : Opening connection to api-cloudstation-eu-central-1.prod.hydra.sophos.com
2023-10-16T12:13:04.2712680Z INFO : Request content size: 30
2023-10-16T12:13:04.5192698Z INFO : Sending request
2023-10-16T12:13:04.5192698Z INFO : Request sent
2023-10-16T12:13:04.5352724Z INFO : Sending request
2023-10-16T12:13:04.5352724Z INFO : Request sent
2023-10-16T12:13:04.5352724Z INFO : Response status code: 200
2023-10-16T12:13:04.5362720Z INFO : Response data size: 306
2023-10-16T12:13:04.5362720Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2023-10-16T12:13:04.5382717Z INFO : Parsing message received for Stage 2 filename: '{"downloads_server":"downloads.sophos.com","telemetry_server":"t1.sophosupd.com","diagnostics_server":"installer1.sophosupd.com","mcs_server":"mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com","stage2_filename":"stage2-1.18.64.0-b4ec394e8714272203c9db3b0099b3b93c9b6a3a732102e79fd007816bc50e31.tar.gz"}'
2023-10-16T12:13:04.5382717Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.18.64.0-b4ec394e8714272203c9db3b0099b3b93c9b6a3a732102e79fd007816bc50e31.tar.gz
2023-10-16T12:13:04.5402745Z INFO : Did not discover an URL for a PAC file
2023-10-16T12:13:04.5412813Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2023-10-16T12:13:04.5422715Z INFO : Set security protocol: 00000800
2023-10-16T12:13:04.5422715Z INFO : Opening connection to downloads.sophos.com
2023-10-16T12:13:04.5432793Z INFO : Request content size: 0
2023-10-16T12:13:04.6162739Z INFO : Sending request
2023-10-16T12:13:04.6162739Z INFO : Request sent
2023-10-16T12:13:04.8052738Z INFO : Response status code: 200
2023-10-16T12:13:04.8082721Z INFO : Response data size: 3546601
2023-10-16T12:13:04.8082721Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2023-10-16T12:13:04.8172746Z INFO : Extracting files:
2023-10-16T12:13:04.8172746Z INFO : integrity.dat
2023-10-16T12:13:04.8312741Z INFO : manifest.dat
2023-10-16T12:13:04.8412746Z INFO : scf.dat
2023-10-16T12:13:04.8522740Z INFO : SDDS3.dll
2023-10-16T12:13:04.9822740Z INFO : sof.dat
2023-10-16T12:13:05.0042750Z INFO : SophosACSenabledTest.exe
2023-10-16T12:13:05.0812781Z INFO : SophosSetup_Stage2.exe
2023-10-16T12:13:05.4812822Z INFO : su-setup32.exe
2023-10-16T12:13:05.6322889Z INFO : su-setup64.exe
2023-10-16T12:13:05.7152907Z INFO : SUL.dll
2023-10-16T12:13:05.8445859Z INFO : Management Certs/sophosca1.crl
2023-10-16T12:13:05.8525868Z INFO : Management Certs/sophosca1.crt
2023-10-16T12:13:05.8625858Z INFO : Management Certs/sophosca2.crl
2023-10-16T12:13:05.8705856Z INFO : Management Certs/sophosca2.crt
2023-10-16T12:13:05.8795892Z INFO : Management Certs/sophosca3.crl
2023-10-16T12:13:05.8885900Z INFO : Management Certs/sophosca3.crt
2023-10-16T12:13:05.8975855Z INFO : Management Certs/sophosca4.crl
2023-10-16T12:13:05.9095880Z INFO : Management Certs/sophosca4.crt
2023-10-16T12:13:05.9205855Z INFO : ManifestCerts/rootca.crl
2023-10-16T12:13:05.9265863Z INFO : ManifestCerts/rootca.crt
2023-10-16T12:13:05.9365858Z INFO : ManifestCerts/rootca384.crl
2023-10-16T12:13:05.9485889Z INFO : ManifestCerts/rootca384.crt
2023-10-16T12:13:05.9645878Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
2023-10-16T12:13:06.0855900Z INFO : Running setup.
2023-10-16T12:13:06.5286018Z INFO : Stage 2 command-line options:
2023-10-16T12:13:06.5296000Z INFO : ---
2023-10-16T12:13:06.5296000Z INFO : Parent PID: 5708
2023-10-16T12:13:06.5296000Z INFO : MCS server: mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2023-10-16T12:13:06.5296000Z INFO : Telemetry server: t1.sophosupd.com
2023-10-16T12:13:06.5306017Z INFO : Diagnostics server: installer1.sophosupd.com
2023-10-16T12:13:06.5306017Z INFO : Message relays: --
2023-10-16T12:13:06.5306017Z INFO : Suppressing feedback: 0
2023-10-16T12:13:06.5306017Z INFO : Dump feedback to disk: 0
2023-10-16T12:13:06.5306017Z INFO : Setting non-persistent image: 0
2023-10-16T12:13:06.5315993Z INFO : Setting gold image: 0
2023-10-16T12:13:06.5315993Z INFO : MCS registration timeout for golden image: --
2023-10-16T12:13:06.5315993Z INFO : Register only: 0
2023-10-16T12:13:06.5315993Z INFO : Trail logging: 0
2023-10-16T12:13:06.5315993Z INFO : Command-line logging: 0
2023-10-16T12:13:06.5326038Z INFO : Bypassing competitor removal: 0
2023-10-16T12:13:06.5326038Z INFO : CRT catalog: --
2023-10-16T12:13:06.5326038Z INFO : Language: --
2023-10-16T12:13:06.5336022Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20231016_121304.log
2023-10-16T12:13:06.5336022Z INFO : Group: --
2023-10-16T12:13:06.5336022Z INFO : Quiet: 0
2023-10-16T12:13:06.5336022Z INFO : Bypass ownership check: 0
2023-10-16T12:13:06.5346028Z INFO : Bypass ACS check: 0
2023-10-16T12:13:06.5356017Z INFO : Virtual appliance: 0
2023-10-16T12:13:06.5356017Z INFO : Proxy address: --
2023-10-16T12:13:06.5356017Z INFO : Proxy user: --
2023-10-16T12:13:06.5356017Z INFO : Overriding computer name: --
2023-10-16T12:13:06.5366011Z INFO : Overriding computer description: --
2023-10-16T12:13:06.5366011Z INFO : Overriding domain: --
2023-10-16T12:13:06.5366011Z INFO : Disable proxy detection: 0
2023-10-16T12:13:06.5366011Z INFO : Customer Token Specified: 14de7f54-d0ce-435b-afda-c43d60177852
2023-10-16T12:13:06.5366011Z INFO : Products: all
2023-10-16T12:13:06.5376008Z INFO : Pipe write handle: 2104
2023-10-16T12:13:06.5376008Z INFO : MCS Certificates Folder: 0
2023-10-16T12:13:06.5376008Z INFO : MCS Customer Id: e5ebf71a-96e0-344b-ea22-f47e9522a216
2023-10-16T12:13:06.5376008Z INFO : User Id: --
2023-10-16T12:13:06.5386012Z INFO : Local install source: --
2023-10-16T12:13:06.5386012Z INFO : Partner Id: --
2023-10-16T12:13:06.5386012Z INFO : Customer Estate Id: --
2023-10-16T12:13:06.5386012Z INFO : Invoked as part of SEC migration: 0
2023-10-16T12:13:06.5396006Z INFO : ---
2023-10-16T12:13:06.5416019Z INFO : User name: fbs_Admin
2023-10-16T12:13:06.5426009Z INFO : NameDnsDomain: DRSCHRAMM.LOCAL\\fbs_Admin
2023-10-16T12:13:06.5426009Z INFO : dnsDomain: DRSCHRAMM.LOCAL
2023-10-16T12:13:06.5966026Z INFO : lpProfilePath:
2023-10-16T12:13:06.6306022Z INFO : User profile loaded
2023-10-16T12:13:06.6316017Z INFO : Net API buffer freed
2023-10-16T12:13:06.6316017Z INFO : Model::messageRelays value changed to be size: 0
2023-10-16T12:13:06.6326021Z INFO : Model::group value changed to:
2023-10-16T12:13:06.6326021Z INFO : Model::parentPid value changed to: 5708
2023-10-16T12:13:06.6326021Z INFO : Model::products changed to: all
2023-10-16T12:13:06.6326021Z INFO : Model::customer token value changed to: 14de7f54-d0ce-435b-afda-c43d60177852
2023-10-16T12:13:06.6336036Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
2023-10-16T12:13:06.6336036Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
2023-10-16T12:13:06.6336036Z INFO : Model:: MCS customer id value changed to: e5ebf71a-96e0-344b-ea22-f47e9522a216
2023-10-16T12:13:06.6346017Z INFO : Sophos Endpoint Defense is not installed
2023-10-16T12:13:06.6346017Z INFO : Not tamper-protected by SED
2023-10-16T12:13:06.6356019Z INFO : detectedMsiInstalledMcs.installed: 0
2023-10-16T12:13:06.6356019Z INFO : Not migrating from SEC endpoint.
2023-10-16T12:13:06.6386015Z INFO : Beginning command definition.
2023-10-16T12:13:06.6386015Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
2023-10-16T12:13:06.6386015Z INFO : Adding command to wait for SAU update to complete.
2023-10-16T12:13:06.6396020Z INFO : Adding competitor detection command.
2023-10-16T12:13:06.6396020Z INFO : Adding command to register with Sophos cloud.
2023-10-16T12:13:06.6396020Z INFO : Adding command to download product suite.
2023-10-16T12:13:06.6396020Z INFO : Adding command to uninstall existing products.
2023-10-16T12:13:06.6406023Z INFO : Trying to get uninstall path for: '{FA203C29-393F-4247-A69D-6C93E6D685EB}'
2023-10-16T12:13:06.6406023Z INFO : Key 'SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{FA203C29-393F-4247-A69D-6C93E6D685EB}' does not exist.
2023-10-16T12:13:06.6406023Z INFO : Trying to get uninstall path for: '{FA203C29-393F-4247-A69D-6C93E6D685EB}'
2023-10-16T12:13:06.6406023Z INFO : Key 'SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{FA203C29-393F-4247-A69D-6C93E6D685EB}' does not exist in redirection hive.
2023-10-16T12:13:06.6416020Z INFO : Adding command to uninstall Sophos AutoUpdate MSI
2023-10-16T12:13:06.6416020Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
2023-10-16T12:13:06.6416020Z INFO : Adding command to allow tamper protected reinstalls.
2023-10-16T12:13:06.6416020Z INFO : Adding commands to uninstall remaining existing products.
2023-10-16T12:13:06.6416020Z INFO : Adding command to remove existing installation of Sophos System Protection
2023-10-16T12:13:06.6426033Z INFO : Adding command to remove existing installation of Sophos Heartbeat
2023-10-16T12:13:06.6426033Z INFO : Adding command to remove existing installation of Sophos Network Access Control
2023-10-16T12:13:06.6426033Z INFO : Adding command to remove existing installation of Sophos Client Firewall
2023-10-16T12:13:06.6426033Z INFO : Adding command to remove existing installation of Sophos Patch
2023-10-16T12:13:06.6426033Z INFO : Adding command to remove existing installation of Sophos Clean
2023-10-16T12:13:06.6426033Z INFO : Adding command to uninstall orphaned products.
2023-10-16T12:13:06.6436032Z INFO : Adding command to prepare for installation.
2023-10-16T12:13:06.6436032Z INFO : Adding command to install Sophos agent.
2023-10-16T12:13:06.6436032Z INFO : Command definition complete.
2023-10-16T12:13:06.6446039Z INFO : Stage 1 version:1.18.64.0
2023-10-16T12:13:06.6446039Z INFO : Stage 2 version:1.18.64.0
2023-10-16T12:13:06.6446039Z INFO : OS version: 10.0.17763.
2023-10-16T12:13:06.6446039Z INFO : Service pack: 0.0.
2023-10-16T12:13:06.6446039Z INFO : System Language: 1031.
2023-10-16T12:13:06.6456036Z INFO : User Language: 1031.
2023-10-16T12:13:06.6456036Z INFO : 64 bit: yes.
2023-10-16T12:13:06.6456036Z INFO : FindMainWindow: pid=5708
2023-10-16T12:13:06.6456036Z INFO : Window is main control window of process
2023-10-16T12:13:06.6466063Z INFO : ::EnumWindows stopped early; window found
2023-10-16T12:13:06.6466063Z INFO : _bestHandle=000501E4
2023-10-16T12:13:06.8936114Z INFO : Running System Property Check: VerifyTrust ...
2023-10-16T12:13:06.9546114Z INFO : System Property Check: VerifyTrust - PASSED
2023-10-16T12:13:07.0066136Z INFO : Running System Property Check: HostnameLength ...
2023-10-16T12:13:07.0076142Z INFO : Initialized Winsock subsystem
2023-10-16T12:13:07.0136158Z INFO : Valid hostname length
2023-10-16T12:13:07.0136158Z INFO : System Property Check: HostnameLength - PASSED
2023-10-16T12:13:07.0646154Z INFO : Running System Property Check: GroupNameLength ...
2023-10-16T12:13:07.0646154Z INFO : System Property Check: GroupNameLength - PASSED
2023-10-16T12:13:07.1156151Z INFO : Running System Property Check: JunctionPointsCheck ...
2023-10-16T12:13:07.1286159Z INFO : Scanned 69 Sophos paths for junction points
2023-10-16T12:13:07.1286159Z INFO : System Property Check: JunctionPointsCheck - PASSED
2023-10-16T12:13:07.1796177Z INFO : Running System Property Check: PendingReboots ...
2023-10-16T12:13:07.1796177Z INFO : System Property Check: PendingReboots - PASSED
2023-10-16T12:13:07.2316180Z INFO : Running System Property Check: PrimaryDriveSpace ...
2023-10-16T12:13:07.2316180Z INFO : Enough space: 562044 Mb
2023-10-16T12:13:07.2326176Z INFO : System Property Check: PrimaryDriveSpace - PASSED
2023-10-16T12:13:07.2834178Z INFO : Running System Property Check: MsXml ...
2023-10-16T12:13:07.3007709Z INFO : System Property Check: MsXml - PASSED
2023-10-16T12:13:07.3527769Z INFO : Running System Property Check: NotFirewall ...
2023-10-16T12:13:07.3547747Z INFO : System Property Check: NotFirewall - PASSED
2023-10-16T12:13:07.4057756Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
2023-10-16T12:13:07.4057756Z INFO : No HitmanPro.Alert Installed
2023-10-16T12:13:07.4057756Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
2023-10-16T12:13:07.4567776Z INFO : Running System Property Check: NotInvincea ...
2023-10-16T12:13:07.4567776Z INFO : System Property Check: NotInvincea - PASSED
2023-10-16T12:13:07.5077799Z INFO : Running System Property Check: NotMessageRelay ...
2023-10-16T12:13:07.5077799Z INFO : RMS is not installed on the endpoint
2023-10-16T12:13:07.5087783Z INFO : System Property Check: NotMessageRelay - PASSED
2023-10-16T12:13:07.5597838Z INFO : Running System Property Check: NotNac ...
2023-10-16T12:13:07.5609331Z INFO : System Property Check: NotNac - PASSED
2023-10-16T12:13:07.6117787Z INFO : Running System Property Check: NotPatch ...
2023-10-16T12:13:07.6127792Z INFO : System Property Check: NotPatch - PASSED
2023-10-16T12:13:07.6636386Z INFO : Running System Property Check: NotPureMessageDomino ...
2023-10-16T12:13:07.6636386Z INFO : System Property Check: NotPureMessageDomino - PASSED
2023-10-16T12:13:07.7146397Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
2023-10-16T12:13:07.7146397Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
2023-10-16T12:13:07.7656422Z INFO : Running System Property Check: NotSharePoint ...
2023-10-16T12:13:07.7656422Z INFO : System Property Check: NotSharePoint - PASSED
2023-10-16T12:13:07.8176423Z INFO : Running System Property Check: NotSecServer ...
2023-10-16T12:13:07.8176423Z INFO : System Property Check: NotSecServer - PASSED
2023-10-16T12:13:07.8686502Z INFO : Running System Property Check: NotSum ...
2023-10-16T12:13:07.8686502Z INFO : System Property Check: NotSum - PASSED
2023-10-16T12:13:07.9206465Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
2023-10-16T12:13:07.9206465Z INFO : Not tamper protected
2023-10-16T12:13:07.9206465Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
2023-10-16T12:13:07.9726462Z INFO : Running System Property Check: RAMSize ...
2023-10-16T12:13:07.9726462Z INFO : System Property Check: RAMSize - PASSED
2023-10-16T12:13:08.0236491Z INFO : Running System Property Check: CpuCoreCount ...
2023-10-16T12:13:08.0236491Z INFO : Logical processor core count: 4
2023-10-16T12:13:08.0246482Z INFO : System Property Check: CpuCoreCount - PASSED
2023-10-16T12:13:08.0756504Z INFO : Running System Property Check: SupportedArchitecture ...
2023-10-16T12:13:08.0756504Z INFO : Running on x64
2023-10-16T12:13:08.0756504Z INFO : System Property Check: SupportedArchitecture - PASSED
2023-10-16T12:13:08.1276527Z INFO : Running System Property Check: SupportedOS ...
2023-10-16T12:13:08.1276527Z INFO : Running on server.
2023-10-16T12:13:08.1276527Z INFO : System Property Check: SupportedOS - PASSED
2023-10-16T12:13:08.1786518Z INFO : Running System Property Check: SupportedPatches ...
2023-10-16T12:13:08.1786518Z INFO : System Property Check: SupportedPatches - PASSED
2023-10-16T12:13:08.2296969Z INFO : Running System Property Check: AzureCodeSigning ...
2023-10-16T12:13:08.2786538Z INFO : ACS supported
2023-10-16T12:13:08.2786538Z INFO : System Property Check: AzureCodeSigning - PASSED
2023-10-16T12:13:08.3296544Z INFO : Running System Property Check: DotNetFramework ...
2023-10-16T12:13:08.3296544Z INFO : Supported .NET version is present
2023-10-16T12:13:08.3306560Z INFO : System Property Check: DotNetFramework - PASSED
2023-10-16T12:13:08.3816595Z INFO : Running System Property Check: ValidTempDirectory ...
2023-10-16T12:13:08.3816595Z INFO : Temp folder exists.
2023-10-16T12:13:08.3826574Z INFO : System Property Check: ValidTempDirectory - PASSED
2023-10-16T12:13:08.4336578Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
2023-10-16T12:13:08.4336578Z INFO : No local install source folder to validate.
2023-10-16T12:13:08.4346577Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
2023-10-16T12:13:08.4856583Z INFO : Running System Property Check: ValidServer ...
2023-10-16T12:13:08.4856583Z INFO : System Property Check: ValidServer - PASSED
2023-10-16T12:13:08.5366562Z INFO : Running System Property Check: ValidDeploymentInfo ...
2023-10-16T12:13:08.5366562Z INFO : Current Time: 2023-10-16T12:13:08.536000
2023-10-16T12:13:08.5376586Z INFO : This computer is part of the domain DRSCHRAMM
2023-10-16T12:13:08.5386594Z INFO : Domain Name: DRSCHRAMM
2023-10-16T12:13:08.5386594Z INFO : Computer Name: TERMINALSERVER
2023-10-16T12:13:08.5386594Z INFO : Computer Description is not available.
2023-10-16T12:13:08.5386594Z INFO : Operating system friendly name: Windows Server 2019 Standard
2023-10-16T12:13:08.5396575Z INFO : Operating system for status: WIN10SERVER
2023-10-16T12:13:08.5396575Z INFO : ProductType: 7
2023-10-16T12:13:08.5436688Z INFO : Session user: DRSCHRAMM\\fbs_Admin
2023-10-16T12:13:08.5436688Z INFO : Last logged on user: DRSCHRAMM\\fbs_Admin
2023-10-16T12:13:08.5446597Z INFO : User principal name: fbs_admin@drschramm.local
2023-10-16T12:13:08.5446597Z INFO : Fully Qualified Domain Name: TERMINALSERVER.drschramm.local
2023-10-16T12:13:08.5446597Z INFO : Processor architecture: x64
2023-10-16T12:13:08.5446597Z INFO : OS Major Version: 10 and OS Minor Version: 0
2023-10-16T12:13:08.5456578Z INFO : Friendly OS Name: WIN10SERVER
2023-10-16T12:13:08.5456578Z INFO : Is server?: 1
2023-10-16T12:13:08.6496661Z INFO : Checking Azure info...
2023-10-16T12:13:08.6496661Z INFO : Sending HTTP 'GET' request to: /metadata/v1/maintenance
2023-10-16T12:13:08.6536584Z INFO : Did not discover an URL for a PAC file
2023-10-16T12:13:08.6536584Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2023-10-16T12:13:08.6546613Z INFO : Opening connection to 169.254.169.254
2023-10-16T12:13:08.6546613Z INFO : Request content size: 0
2023-10-16T12:13:29.6610149Z ERROR : WinHttpSendRequest failed with error 12002
2023-10-16T12:13:29.6610149Z INFO : Failed to connect using proxy '' with error: WinHttpSendRequest failed
2023-10-16T12:13:29.6620152Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
2023-10-16T12:13:29.6640137Z INFO : Did not discover an URL for a PAC file
2023-10-16T12:13:29.6640137Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2023-10-16T12:13:29.6650142Z INFO : Set security protocol: 00000800
2023-10-16T12:13:29.6660145Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2023-10-16T12:13:29.6660145Z INFO : Sending request for connection confirmation through potential proxy
2023-10-16T12:13:29.6660145Z INFO : Request content size: 0
2023-10-16T12:13:29.7150172Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:29.7170148Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:29.7180183Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:29.7210148Z INFO : Certificate check succeeded
2023-10-16T12:13:29.7220165Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:29.7310151Z INFO : Response status code: 200
2023-10-16T12:13:29.7310151Z INFO : Response data size: 168
2023-10-16T12:13:29.7310151Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2023-10-16T12:13:29.7320182Z INFO : Request content size: 1493
2023-10-16T12:13:29.7320182Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:29.7340161Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:29.7350181Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:29.7390160Z INFO : Certificate check succeeded
2023-10-16T12:13:29.7390160Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:29.7560160Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:29.7580178Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:29.7590181Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:29.7720213Z INFO : Certificate check succeeded
2023-10-16T12:13:29.7720213Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:29.7720213Z INFO : Response status code: 200
2023-10-16T12:13:29.7730157Z INFO : Response data size: 220
2023-10-16T12:13:29.7730157Z INFO : Parsing message received for deployment token: {"registrationToken":"20d9dbb95804aac4c770525c7fd78235c328e911840e747a0d914bef9e5cc9d8","dciFileName":"4b86f40f2153369c09ea30ffeb5379da","products":[{"product":"SERVER_INTERCEPT_ADVANCED","supported":true,"reasons":[]}]}
2023-10-16T12:13:29.7730157Z INFO : Model::token value changed to: 20d9dbb95804aac4c770525c7fd78235c328e911840e747a0d914bef9e5cc9d8
2023-10-16T12:13:29.7730157Z INFO : Licenses available: SERVER_INTERCEPT_ADVANCED
2023-10-16T12:13:29.9270190Z INFO : Running System Property Check: InstallationInProgress ...
2023-10-16T12:13:29.9270190Z INFO : System Property Check: InstallationInProgress - PASSED
2023-10-16T12:13:29.9780176Z INFO : Running System Property Check: SafeGuardEncryption ...
2023-10-16T12:13:29.9780176Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
2023-10-16T12:13:29.9780176Z INFO : Product is not installed
2023-10-16T12:13:29.9790179Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): false
2023-10-16T12:13:29.9790179Z INFO : System Property Check: SafeGuardEncryption - PASSED
2023-10-16T12:13:35.7059029Z INFO : Starting installation process.
2023-10-16T12:13:35.7069033Z INFO : About to execute command: CleanSophosIfeoKeysCommand
2023-10-16T12:13:35.7129040Z INFO : Command 'CleanSophosIfeoKeysCommand' completed with success with reboot code '0' and error message ''.
2023-10-16T12:13:35.7139019Z INFO : About to execute command: WaitForSauUpdateCommand
2023-10-16T12:13:35.7139019Z INFO : Waiting for operation to succeed within 900000ms.
2023-10-16T12:13:35.7139019Z INFO : AutoUpdate folder: C:\\Program Files (x86)\\Sophos\\AutoUpdate
2023-10-16T12:13:35.7149014Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:13:35.7149014Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:13:35.7159013Z INFO : SAU not updating - continuing with installation
2023-10-16T12:13:35.7159013Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:13:35.7169056Z INFO : Command 'WaitForSauUpdateCommand' completed with success with reboot code '0' and error message ''.
2023-10-16T12:13:35.7169056Z INFO : About to execute command: CompetitorDetector
2023-10-16T12:13:35.7169056Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
2023-10-16T12:13:35.7169056Z INFO : About to execute command: Register
2023-10-16T12:13:35.7179070Z INFO : Ensuring any MCS client service is stopped to prevent race for policy retrieval
2023-10-16T12:13:35.7179070Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
2023-10-16T12:13:35.7199014Z INFO : Did not discover an URL for a PAC file
2023-10-16T12:13:35.7199014Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2023-10-16T12:13:35.7209062Z INFO : Set security protocol: 00000800
2023-10-16T12:13:35.7209062Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2023-10-16T12:13:35.7219017Z INFO : Sending request for connection confirmation through potential proxy
2023-10-16T12:13:35.7219017Z INFO : Request content size: 0
2023-10-16T12:13:35.7219017Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:35.7239040Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:35.7239040Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:35.7259025Z INFO : Certificate check succeeded
2023-10-16T12:13:35.7269009Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:35.7359092Z INFO : Response status code: 200
2023-10-16T12:13:35.7359092Z INFO : Response data size: 168
2023-10-16T12:13:35.7369072Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2023-10-16T12:13:35.7369072Z INFO : Request content size: 1493
2023-10-16T12:13:35.7379059Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:35.7389030Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:35.7399485Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:35.7439037Z INFO : Certificate check succeeded
2023-10-16T12:13:35.7439037Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:35.9629067Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:35.9649059Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:35.9659071Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:35.9689070Z INFO : Certificate check succeeded
2023-10-16T12:13:35.9699076Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:35.9699076Z INFO : Response status code: 200
2023-10-16T12:13:35.9699076Z INFO : Response data size: 72
2023-10-16T12:13:35.9709068Z INFO : Retrieved endpoint id: 8d6ba54b-8df9-4428-b9b8-9d5034772777
2023-10-16T12:13:36.9719227Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/authenticate/endpoint/8d6ba54b-8df9-4428-b9b8-9d5034772777/role/endpoint
2023-10-16T12:13:36.9719227Z INFO : Request content size: 0
2023-10-16T12:13:36.9729274Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:36.9739227Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:36.9739227Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:36.9779157Z INFO : Certificate check succeeded
2023-10-16T12:13:36.9779157Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.0919221Z INFO : Response status code: 200
2023-10-16T12:13:37.0919221Z INFO : Response data size: 1116
2023-10-16T12:13:37.0929218Z INFO : Retrieved mcs auth: tenant_id=5ebe7fa1-690e-43b4-ae22-4fe759222a61 device_id=d8b65ab4-d89f-4482-9b8b-d90543777277
2023-10-16T12:13:37.0939241Z INFO : MCS Auth token features: f_endpoint_updating
2023-10-16T12:13:37.0949194Z INFO : MCS Auth token features: f_srv_efw
2023-10-16T12:13:37.0949194Z INFO : MCS Auth token features: f_srv_hbt
2023-10-16T12:13:37.0959196Z INFO : MCS Auth token features: f_srv_ml
2023-10-16T12:13:37.0959196Z INFO : MCS Auth token features: f_srv_av
2023-10-16T12:13:37.0969257Z INFO : MCS Auth token features: f_srv_mtd
2023-10-16T12:13:37.0969257Z INFO : MCS Auth token features: f_srv_xpd
2023-10-16T12:13:37.0979234Z INFO : MCS Auth token features: f_srv_stac
2023-10-16T12:13:37.0979234Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/flags/endpoint/8d6ba54b-8df9-4428-b9b8-9d5034772777
2023-10-16T12:13:37.0989186Z INFO : Request content size: 0
2023-10-16T12:13:37.0999155Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:37.1019167Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:37.1019167Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:37.1059175Z INFO : Certificate check succeeded
2023-10-16T12:13:37.1059175Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.1269167Z INFO : Response status code: 200
2023-10-16T12:13:37.1279180Z INFO : Response data size: 4670
2023-10-16T12:13:37.1289175Z INFO : Loaded 127 endpoint flags
2023-10-16T12:13:37.1289175Z INFO : Using SDDS3: Enabled in Central AND SED is not installed
2023-10-16T12:13:37.1289175Z INFO : Setting sdds3 download to: true
2023-10-16T12:13:37.1299150Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/8d6ba54b-8df9-4428-b9b8-9d5034772777
2023-10-16T12:13:37.1299150Z INFO : Request content size: 990
2023-10-16T12:13:37.1309147Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:37.1319160Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:37.1329173Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:37.1349177Z INFO : Certificate check succeeded
2023-10-16T12:13:37.1349177Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.1739191Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:37.1759216Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:37.1770394Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:37.1799194Z INFO : Certificate check succeeded
2023-10-16T12:13:37.1799194Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.1799194Z INFO : Response status code: 200
2023-10-16T12:13:37.1799194Z INFO : Response data size: 0
2023-10-16T12:13:37.1809188Z INFO : Attempt to retrieve policy.
2023-10-16T12:13:37.1809188Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/8d6ba54b-8df9-4428-b9b8-9d5034772777
2023-10-16T12:13:37.1809188Z INFO : Request content size: 0
2023-10-16T12:13:37.1819158Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:37.1829158Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:37.1839180Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:37.1879147Z INFO : Certificate check succeeded
2023-10-16T12:13:37.1879147Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.1989165Z INFO : Response status code: 200
2023-10-16T12:13:37.1989165Z INFO : Response data size: 791
2023-10-16T12:13:37.1999153Z INFO : Successfully retrieved policy with policyId='d295433149fa8fdc2b593a0cbd0238ce8c7f16b4404bdce518d22c90026da33a'.
2023-10-16T12:13:37.1999153Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/8d6ba54b-8df9-4428-b9b8-9d5034772777/112
2023-10-16T12:13:37.1999153Z INFO : Request content size: 0
2023-10-16T12:13:37.2011709Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:37.2029169Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:37.2039189Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:37.2069145Z INFO : Certificate check succeeded
2023-10-16T12:13:37.2069145Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.2219163Z INFO : Response status code: 200
2023-10-16T12:13:37.2219163Z INFO : Response data size: 0
2023-10-16T12:13:37.2219163Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/d295433149fa8fdc2b593a0cbd0238ce8c7f16b4404bdce518d22c90026da33a
2023-10-16T12:13:37.2229306Z INFO : Request content size: 0
2023-10-16T12:13:37.2229306Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:13:37.2259230Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:13:37.2270058Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:13:37.2299299Z INFO : Certificate check succeeded
2023-10-16T12:13:37.2309730Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:13:37.3519198Z INFO : Response status code: 200
2023-10-16T12:13:37.3529530Z INFO : Response data size: 3249
2023-10-16T12:13:37.3529530Z INFO : Assume obfuscated SAU password
2023-10-16T12:13:37.5119222Z INFO : Updating subscription created with id: Base, rigidname: WindowsCloudServer, baseversion: 1, tag: RECOMMENDED, fixedversion:
2023-10-16T12:13:37.5119222Z INFO : Updating subscription created with id: CloudAV, rigidname: WindowsCloudServerAV, baseversion: 1, tag: RECOMMENDED, fixedversion:
2023-10-16T12:13:37.5129176Z INFO : Updating subscription created with id: HitmanProAlert, rigidname: WindowsCloudServerHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion:
2023-10-16T12:13:37.5129176Z INFO : Features: APPCNTRL
2023-10-16T12:13:37.5129176Z INFO : Features: AV
2023-10-16T12:13:37.5139227Z INFO : Features: CLEAN
2023-10-16T12:13:37.5139227Z INFO : Features: CORE
2023-10-16T12:13:37.5139227Z INFO : Features: DLP
2023-10-16T12:13:37.5139227Z INFO : Features: DVCCNTRL
2023-10-16T12:13:37.5149220Z INFO : Features: EFW
2023-10-16T12:13:37.5149220Z INFO : Features: FIM
2023-10-16T12:13:37.5149220Z INFO : Features: HBT
2023-10-16T12:13:37.5149220Z INFO : Features: MTD
2023-10-16T12:13:37.5149220Z INFO : Features: NTP
2023-10-16T12:13:37.5159214Z INFO : Features: SAV
2023-10-16T12:13:37.5159214Z INFO : Features: SDU
2023-10-16T12:13:37.5159214Z INFO : Features: WEBCNTRL
2023-10-16T12:13:37.5159214Z INFO : Features: XPD
2023-10-16T12:13:37.5159214Z INFO : Setting https download to: true
2023-10-16T12:13:37.5169216Z INFO : Updating credentials created with username: CSPwVBJ1Z7IZ
2023-10-16T12:13:37.5169216Z INFO : Server for 'sus': sus.sophosupd.com
2023-10-16T12:13:37.5169216Z INFO : Server for 'content_server': sdds3.sophosupd.com
2023-10-16T12:13:37.5169216Z INFO : Server for 'content_server': sdds3.sophosupd.net
2023-10-16T12:13:37.5169216Z INFO : Server for 'telemetry': t1.sophosupd.com
2023-10-16T12:13:37.5179225Z INFO : Server for 'feedback': sdu-feedback.sophos.com
2023-10-16T12:13:37.5179225Z INFO : Server for 'repairkit': sdu-auto-upload.sophosupd.com
2023-10-16T12:13:37.5179225Z INFO : Restarting MCS Client service if stopped
2023-10-16T12:13:37.5189218Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
2023-10-16T12:13:37.5189218Z INFO : About to execute command: Download
2023-10-16T12:13:37.5189218Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2023-10-16T12:13:37.5219217Z INFO : CRT required: adding 'CRT' feature
2023-10-16T12:13:37.5459224Z INFO : No manually configured proxy
2023-10-16T12:13:37.5459224Z INFO : WinHttp default proxy not set
2023-10-16T12:13:37.5469222Z INFO : WinHttp discovered proxies not found
2023-10-16T12:13:37.5479178Z INFO : Trying update service url sus.sophosupd.com/.../d8b65ab4-d89f-4482-9b8b-d90543777277 with proxy: <direct; no proxy>
2023-10-16T12:13:37.6849287Z INFO : 200 from sus.sophosupd.com/.../d8b65ab4-d89f-4482-9b8b-d90543777277 with proxy: <direct; no proxy> (peer address 52.30.229.235)
2023-10-16T12:13:37.6939204Z INFO : Sophos Update Service response: error='' reason='' code=''
2023-10-16T12:13:37.6949213Z INFO : No update caches configured
2023-10-16T12:13:37.6949213Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy>
2023-10-16T12:13:37.7379196Z INFO : 200 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy> (peer address 193.246.9.198)
2023-10-16T12:13:37.7379196Z INFO : Syncing from: https://sdds3.sophosupd.com
2023-10-16T12:13:37.7399260Z INFO : Syncing suite sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat
2023-10-16T12:13:37.7819243Z INFO : GET sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat: 200 (3924 bytes)
2023-10-16T12:13:37.8249217Z INFO : Syncing suite sdds3.WindowsCloudServerHitmanProAlert_2023.1.1.6.0.b39faef951.dat
2023-10-16T12:13:37.8599211Z INFO : GET sdds3.sophosupd.com/.../sdds3.WindowsCloudServerHitmanProAlert_2023.1.1.6.0.b39faef951.dat: 200 (4487 bytes)
2023-10-16T12:13:37.9029221Z INFO : Syncing suite sdds3.WindowsCloudServer_2023.1.3.5.0.f25438c00d.dat
2023-10-16T12:13:37.9550687Z INFO : GET sdds3.sophosupd.com/.../sdds3.WindowsCloudServer_2023.1.3.5.0.f25438c00d.dat: 200 (9089 bytes)
2023-10-16T12:13:38.0029240Z INFO : Syncing supplement sdds3.CEPNGSRVFLAGS.dat
2023-10-16T12:13:38.0269220Z INFO : GET sdds3.sophosupd.com/.../sdds3.CEPNGSRVFLAGS.dat: 200 (6138 bytes)
2023-10-16T12:13:38.0569212Z INFO : Syncing supplement sdds3.NTP_OVERRIDES.dat
2023-10-16T12:13:38.0849210Z INFO : GET sdds3.sophosupd.com/.../sdds3.NTP_OVERRIDES.dat: 200 (4038 bytes)
2023-10-16T12:13:38.1139232Z INFO : Syncing supplement sdds3.EPIPS_data.dat
2023-10-16T12:13:38.1389230Z INFO : GET sdds3.sophosupd.com/.../sdds3.EPIPS_data.dat: 200 (4021 bytes)
2023-10-16T12:13:38.1709235Z INFO : Syncing supplement sdds3.FIMFEED.dat
2023-10-16T12:13:38.1949324Z INFO : GET sdds3.sophosupd.com/.../sdds3.FIMFEED.dat: 200 (4014 bytes)
2023-10-16T12:13:38.2239233Z INFO : Syncing supplement sdds3.D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE.dat
2023-10-16T12:13:38.2519244Z INFO : GET sdds3.sophosupd.com/.../sdds3.D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE.dat: 200 (4048 bytes)
2023-10-16T12:13:38.2809246Z INFO : Syncing supplement sdds3.DOC_MODEL2_64.dat
2023-10-16T12:13:38.3089339Z INFO : GET sdds3.sophosupd.com/.../sdds3.DOC_MODEL2_64.dat: 200 (4324 bytes)
2023-10-16T12:13:38.3369257Z INFO : Syncing supplement sdds3.ML_MODEL2_64.dat
2023-10-16T12:13:38.3619249Z INFO : GET sdds3.sophosupd.com/.../sdds3.ML_MODEL2_64.dat: 200 (4688 bytes)
2023-10-16T12:13:38.4059260Z INFO : Syncing supplement sdds3.LocalRepData.dat
2023-10-16T12:13:38.4289255Z INFO : GET sdds3.sophosupd.com/.../sdds3.LocalRepData.dat: 200 (4030 bytes)
2023-10-16T12:13:38.4609582Z INFO : Syncing supplement sdds3.97B6A561-5F87-4A2E-A4FE-177F48D8899F.dat
2023-10-16T12:13:38.5209284Z INFO : GET sdds3.sophosupd.com/.../sdds3.97B6A561-5F87-4A2E-A4FE-177F48D8899F.dat: 200 (4255 bytes)
2023-10-16T12:13:38.5599270Z INFO : Syncing supplement sdds3.REPAIRKIT.dat
2023-10-16T12:13:38.6209267Z INFO : GET sdds3.sophosupd.com/.../sdds3.REPAIRKIT.dat: 200 (4501 bytes)
2023-10-16T12:13:38.6529267Z INFO : Syncing supplement sdds3.TELEMSUP.dat
2023-10-16T12:13:38.7459348Z INFO : GET sdds3.sophosupd.com/.../sdds3.TELEMSUP.dat: 200 (4022 bytes)
2023-10-16T12:13:38.7739278Z INFO : Syncing supplement sdds3.behave.dat
2023-10-16T12:13:38.8069313Z INFO : GET sdds3.sophosupd.com/.../sdds3.behave.dat: 200 (4028 bytes)
2023-10-16T12:13:38.8339284Z INFO : Syncing supplement sdds3.APPFEED.dat
2023-10-16T12:13:38.8685328Z INFO : GET sdds3.sophosupd.com/.../sdds3.APPFEED.dat: 200 (4012 bytes)
2023-10-16T12:13:38.8975296Z INFO : Syncing supplement sdds3.DataSetA.dat
2023-10-16T12:13:38.9299034Z INFO : GET sdds3.sophosupd.com/.../sdds3.DataSetA.dat: 200 (4463 bytes)
2023-10-16T12:13:38.9600830Z INFO : Syncing supplement sdds3.CIXSRVFLAGS.dat
2023-10-16T12:13:38.9968940Z INFO : GET sdds3.sophosupd.com/.../sdds3.CIXSRVFLAGS.dat: 200 (6715 bytes)
2023-10-16T12:13:39.0278906Z INFO : Syncing supplement sdds3.hmpa_data.dat
2023-10-16T12:13:39.0568914Z INFO : GET sdds3.sophosupd.com/.../sdds3.hmpa_data.dat: 200 (4020 bytes)
2023-10-16T12:13:39.0908926Z INFO : Syncing package hmpa_data_2023.10.15.9.30.46.1.810cd8974a.zip (28190 bytes)
2023-10-16T12:13:39.1288930Z INFO : GET sdds3.sophosupd.com/.../hmpa_data_2023.10.15.9.30.46.1.810cd8974a.zip: 200 (28190 bytes)
2023-10-16T12:13:39.1468953Z INFO : Syncing package CIXSRVFLAGS_2023.10.3.13.10.44.13.038ee36b52.zip (4530 bytes)
2023-10-16T12:13:39.1868909Z INFO : GET sdds3.sophosupd.com/.../CIXSRVFLAGS_2023.10.3.13.10.44.13.038ee36b52.zip: 200 (4530 bytes)
2023-10-16T12:13:39.2048928Z INFO : Syncing package DataSetA_2023.10.13.4.14.40.1.5c8f3a86e6.zip (18907467 bytes)
2023-10-16T12:13:39.7802639Z INFO : GET sdds3.sophosupd.com/.../DataSetA_2023.10.13.4.14.40.1.5c8f3a86e6.zip: 200 (18907467 bytes)
2023-10-16T12:13:39.9232688Z INFO : Syncing package APPFEED_2023.7.19.10.4.2.1.093f9a3dae.zip (58520 bytes)
2023-10-16T12:13:39.9652664Z INFO : GET sdds3.sophosupd.com/.../APPFEED_2023.7.19.10.4.2.1.093f9a3dae.zip: 200 (58520 bytes)
2023-10-16T12:13:39.9832647Z INFO : Syncing package LocalRepData_2023.10.12.12.40.54.1.262c1b446b.zip (313406 bytes)
2023-10-16T12:13:40.0192751Z INFO : GET sdds3.sophosupd.com/.../LocalRepData_2023.10.12.12.40.54.1.262c1b446b.zip: 200 (313406 bytes)
2023-10-16T12:13:40.0512682Z INFO : Syncing package behave_2023.10.12.19.6.0.1.c2f6742804.zip (857308 bytes)
2023-10-16T12:13:40.1392649Z INFO : GET sdds3.sophosupd.com/.../behave_2023.10.12.19.6.0.1.c2f6742804.zip: 200 (857308 bytes)
2023-10-16T12:13:40.1652643Z INFO : Syncing package TELEMSUP_2023.9.7.15.8.10.1.3e4da4447f.zip (5819 bytes)
2023-10-16T12:13:40.1973514Z INFO : GET sdds3.sophosupd.com/.../TELEMSUP_2023.9.7.15.8.10.1.3e4da4447f.zip: 200 (5819 bytes)
2023-10-16T12:13:40.2182780Z INFO : Syncing package REPAIRKIT_2023.9.11.12.21.2.3.cf548a3592.zip (55204 bytes)
2023-10-16T12:13:40.2512772Z INFO : GET sdds3.sophosupd.com/.../REPAIRKIT_2023.9.11.12.21.2.3.cf548a3592.zip: 200 (55204 bytes)
2023-10-16T12:13:40.2662694Z INFO : Syncing package 97B6A561-5F87-4A2E-A4FE-177F48D8899F_2023.7.19.9.50.42.1.b6fb0fdb35.zip (10216641 bytes)
2023-10-16T12:13:40.5612885Z INFO : GET sdds3.sophosupd.com/.../97B6A561-5F87-4A2E-A4FE-177F48D8899F_2023.7.19.9.50.42.1.b6fb0fdb35.zip: 200 (10216641 bytes)
2023-10-16T12:13:40.6552711Z INFO : Syncing package ML_MODEL2_64_2023.7.5.14.14.9.5.d2856349f5.zip (11004475 bytes)
2023-10-16T12:13:40.9962746Z INFO : GET sdds3.sophosupd.com/.../ML_MODEL2_64_2023.7.5.14.14.9.5.d2856349f5.zip: 200 (11004475 bytes)
2023-10-16T12:13:41.0992726Z INFO : Syncing package ML_MODEL2_64_2023.7.5.14.13.50.2.d2856349f5.zip (11004475 bytes)
2023-10-16T12:13:41.8163201Z INFO : GET sdds3.sophosupd.com/.../ML_MODEL2_64_2023.7.5.14.13.50.2.d2856349f5.zip: 200 (11004475 bytes)
2023-10-16T12:13:41.9132836Z INFO : Syncing package DOC_MODEL2_64_2023.9.7.15.13.44.2.088fafc622.zip (2438311 bytes)
2023-10-16T12:13:42.0422782Z INFO : GET sdds3.sophosupd.com/.../DOC_MODEL2_64_2023.9.7.15.13.44.2.088fafc622.zip: 200 (2438311 bytes)
2023-10-16T12:13:42.0792775Z INFO : Syncing package D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE_2023.9.12.10.17.34.1.058b9fdc2a.zip (41989 bytes)
2023-10-16T12:13:42.1252773Z INFO : GET sdds3.sophosupd.com/.../D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE_2023.9.12.10.17.34.1.058b9fdc2a.zip: 200 (41989 bytes)
2023-10-16T12:13:42.1412771Z INFO : Syncing package FIMFEED_2023.7.19.10.37.41.1.a77332a765.zip (7426 bytes)
2023-10-16T12:13:42.1762802Z INFO : GET sdds3.sophosupd.com/.../FIMFEED_2023.7.19.10.37.41.1.a77332a765.zip: 200 (7426 bytes)
2023-10-16T12:13:42.1942994Z INFO : Syncing package EPIPS_data_2023.10.12.9.48.9.1.ec3366093f.zip (35330 bytes)
2023-10-16T12:13:42.2183198Z INFO : GET sdds3.sophosupd.com/.../EPIPS_data_2023.10.12.9.48.9.1.ec3366093f.zip: 200 (35330 bytes)
2023-10-16T12:13:42.2362759Z INFO : Syncing package NTP_OVERRIDES_2023.9.7.15.6.32.1.62c740caba.zip (4537 bytes)
2023-10-16T12:13:42.2642802Z INFO : GET sdds3.sophosupd.com/.../NTP_OVERRIDES_2023.9.7.15.6.32.1.62c740caba.zip: 200 (4537 bytes)
2023-10-16T12:13:42.2782801Z INFO : Syncing package CEPNGSRVFLAGS_2023.9.18.10.18.9.15.0928442cc8.zip (5100 bytes)
2023-10-16T12:13:42.3062776Z INFO : GET sdds3.sophosupd.com/.../CEPNGSRVFLAGS_2023.9.18.10.18.9.15.0928442cc8.zip: 200 (5100 bytes)
2023-10-16T12:13:42.3222777Z INFO : Syncing package WindowsCloudServer_2023.1.3.5.0.0574a151e1.zip (1493 bytes)
2023-10-16T12:13:42.3512802Z INFO : GET sdds3.sophosupd.com/.../WindowsCloudServer_2023.1.3.5.0.0574a151e1.zip: 200 (1493 bytes)
2023-10-16T12:13:42.3712786Z INFO : Syncing package SDU64_6.15.1417.58ff7d17d5.zip (3145739 bytes)
2023-10-16T12:13:42.5482815Z INFO : GET sdds3.sophosupd.com/.../SDU64_6.15.1417.58ff7d17d5.zip: 200 (3145739 bytes)
2023-10-16T12:13:42.5992809Z INFO : Syncing package NTP64_1.17.3508.7ed54d878a.zip (10435555 bytes)
2023-10-16T12:13:44.4852904Z INFO : GET sdds3.sophosupd.com/.../NTP64_1.17.3508.7ed54d878a.zip: 200 (10435555 bytes)
2023-10-16T12:13:44.5692936Z INFO : Syncing package FIM_1.0.3.449.18e0be72bd.zip (2159239 bytes)
2023-10-16T12:13:44.7282926Z INFO : GET sdds3.sophosupd.com/.../FIM_1.0.3.449.18e0be72bd.zip: 200 (2159239 bytes)
2023-10-16T12:13:44.7662943Z INFO : Syncing package EFW64_2.3.93.dbbbf83698.zip (1166655 bytes)
2023-10-16T12:13:44.8532963Z INFO : GET sdds3.sophosupd.com/.../EFW64_2.3.93.dbbbf83698.zip: 200 (1166655 bytes)
2023-10-16T12:13:44.8853013Z INFO : Syncing package ESH64_3.4.530.0.ab15291c67.zip (2950312 bytes)
2023-10-16T12:13:45.0192936Z INFO : GET sdds3.sophosupd.com/.../ESH64_3.4.530.0.ab15291c67.zip: 200 (2950312 bytes)
2023-10-16T12:13:45.0572933Z INFO : Syncing package SME64_1.8.25.1.cd5d943837.zip (950538 bytes)
2023-10-16T12:13:45.1242937Z INFO : GET sdds3.sophosupd.com/.../SME64_1.8.25.1.cd5d943837.zip: 200 (950538 bytes)
2023-10-16T12:13:45.1493105Z INFO : Syncing package AMSI64_1.9.2098.130a9fe76d.zip (1959315 bytes)
2023-10-16T12:13:45.2382976Z INFO : GET sdds3.sophosupd.com/.../AMSI64_1.9.2098.130a9fe76d.zip: 200 (1959315 bytes)
2023-10-16T12:13:45.2702952Z INFO : Syncing package UI64_2.9.564.957202bcf2.zip (2825741 bytes)
2023-10-16T12:13:45.3882968Z INFO : GET sdds3.sophosupd.com/.../UI64_2.9.564.957202bcf2.zip: 200 (2825741 bytes)
2023-10-16T12:13:45.4272993Z INFO : Syncing package SFS64_1.11.3.879.653f09dd80.zip (3030666 bytes)
2023-10-16T12:13:45.5552986Z INFO : GET sdds3.sophosupd.com/.../SFS64_1.11.3.879.653f09dd80.zip: 200 (3030666 bytes)
2023-10-16T12:13:45.5982961Z INFO : Syncing package SHS_2.12.883.575a05384a.zip (2428016 bytes)
2023-10-16T12:13:45.7173021Z INFO : GET sdds3.sophosupd.com/.../SHS_2.12.883.575a05384a.zip: 200 (2428016 bytes)
2023-10-16T12:13:45.7513012Z INFO : Syncing package MCS_4.19.561.f429d0430f.zip (2203295 bytes)
2023-10-16T12:13:45.8653009Z INFO : GET sdds3.sophosupd.com/.../MCS_4.19.561.f429d0430f.zip: 200 (2203295 bytes)
2023-10-16T12:13:45.9002977Z INFO : Syncing package CRTSETUP_0.1.25.d8119030fa.zip (211979 bytes)
2023-10-16T12:13:45.9523000Z INFO : GET sdds3.sophosupd.com/.../CRTSETUP_0.1.25.d8119030fa.zip: 200 (211979 bytes)
2023-10-16T12:13:45.9732983Z INFO : Syncing package UNINSTALLER64_1.16.676.30faef2d8f.zip (1019445 bytes)
2023-10-16T12:13:46.0703010Z INFO : GET sdds3.sophosupd.com/.../UNINSTALLER64_1.16.676.30faef2d8f.zip: 200 (1019445 bytes)
2023-10-16T12:13:46.0993173Z INFO : Syncing package SAUXG_6.15.1417.b642dbb93c.zip (5259327 bytes)
2023-10-16T12:13:46.2743042Z INFO : GET sdds3.sophosupd.com/.../SAUXG_6.15.1417.b642dbb93c.zip: 200 (5259327 bytes)
2023-10-16T12:13:46.3243018Z INFO : Syncing package SED64_3.1.3.2282.afd18a142c.zip (17529655 bytes)
2023-10-16T12:13:46.8003163Z INFO : GET sdds3.sophosupd.com/.../SED64_3.1.3.2282.afd18a142c.zip: 200 (17529655 bytes)
2023-10-16T12:13:46.9253052Z INFO : Syncing package SSE64_3.88.0.81.84dde49a36.zip (8774224 bytes)
2023-10-16T12:13:47.2323174Z INFO : GET sdds3.sophosupd.com/.../SSE64_3.88.0.81.84dde49a36.zip: 200 (8774224 bytes)
2023-10-16T12:13:47.3153063Z INFO : Syncing package WindowsCloudServerHitmanProAlert_2023.1.1.6.0.db9d8a818c.zip (22 bytes)
2023-10-16T12:13:47.4473153Z INFO : GET sdds3.sophosupd.com/.../WindowsCloudServerHitmanProAlert_2023.1.1.6.0.db9d8a818c.zip: 200 (22 bytes)
2023-10-16T12:13:47.4652532Z INFO : Syncing package HMPAPOLICY_3.9.1.2325.f91d748b7e.zip (8771 bytes)
2023-10-16T12:13:47.4932589Z INFO : GET sdds3.sophosupd.com/.../HMPAPOLICY_3.9.1.2325.f91d748b7e.zip: 200 (8771 bytes)
2023-10-16T12:13:47.5135779Z INFO : Syncing package HMPA64_3.9.1.2325.b5651bde00.zip (5531586 bytes)
2023-10-16T12:13:47.7402561Z INFO : GET sdds3.sophosupd.com/.../HMPA64_3.9.1.2325.b5651bde00.zip: 200 (5531586 bytes)
2023-10-16T12:13:47.7982517Z INFO : Syncing package WindowsCloudServerAV_1.3.95.b6afda70a8.zip (2929 bytes)
2023-10-16T12:13:47.8372568Z INFO : GET sdds3.sophosupd.com/.../WindowsCloudServerAV_1.3.95.b6afda70a8.zip: 200 (2929 bytes)
2023-10-16T12:13:47.9602568Z INFO : Sync statistics: received 126704968 bytes, sent 16283 bytes
2023-10-16T12:13:47.9612822Z INFO : Suites: 3, used 17500 bytes
2023-10-16T12:13:47.9612822Z INFO : Supplements: 16, used 71317 bytes
2023-10-16T12:13:47.9612822Z INFO : Packages: 38, used 126583230 bytes
2023-10-16T12:13:49.8532620Z INFO : WindowsCloudServerAV: downloaded suite: sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat, version: 1.3.95, display version: 10.8.11.4
2023-10-16T12:13:49.8542633Z INFO : WindowsCloudServerHitmanProAlert: downloaded suite: sdds3.WindowsCloudServerHitmanProAlert_2023.1.1.6.0.b39faef951.dat, version: 2023.1.1.6.0, display version: 2023.1.1.6
2023-10-16T12:13:49.8542633Z INFO : WindowsCloudServer: downloaded suite: sdds3.WindowsCloudServer_2023.1.3.5.0.f25438c00d.dat, version: 2023.1.3.5.0, display version: 2023.1.3.5
2023-10-16T12:13:49.8542633Z INFO : Extracting packages.
2023-10-16T12:13:49.8742598Z INFO : Extracting package hmpa_data_2023.10.15.9.30.46.1.810cd8974a.zip
2023-10-16T12:13:49.8742598Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\hmpalert.bf
2023-10-16T12:13:49.9142609Z INFO : Extracting package CIXSRVFLAGS_2023.10.3.13.10.44.13.038ee36b52.zip
2023-10-16T12:13:49.9152604Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\flags\\cixsrv.json
2023-10-16T12:13:49.9522636Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\flags_cixsrv_manifest.dat
2023-10-16T12:13:50.3032808Z INFO : Extracting package DataSetA_2023.10.13.4.14.40.1.5c8f3a86e6.zip
2023-10-16T12:13:50.3032808Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081607.ide
2023-10-16T12:13:50.3402638Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081601.ide
2023-10-16T12:13:50.3782660Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092201.ide
2023-10-16T12:13:50.4112653Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080805.ide
2023-10-16T12:13:50.4462668Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090806.ide
2023-10-16T12:13:50.4782638Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100401.ide
2023-10-16T12:13:50.5092811Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092703.ide
2023-10-16T12:13:50.5402629Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091804.ide
2023-10-16T12:13:50.5712643Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081505.ide
2023-10-16T12:13:50.6002661Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla06.vdb
2023-10-16T12:13:50.8042631Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080907.ide
2023-10-16T12:13:50.8342662Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100301.ide
2023-10-16T12:13:50.8622663Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072606.ide
2023-10-16T12:13:50.8972634Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080203.ide
2023-10-16T12:13:50.9272663Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091201.ide
2023-10-16T12:13:50.9552653Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090701.ide
2023-10-16T12:13:50.9872658Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090404.ide
2023-10-16T12:13:51.0172661Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082805.ide
2023-10-16T12:13:51.0572669Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072805.ide
2023-10-16T12:13:51.0922675Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla01.vdb
2023-10-16T12:13:51.2932648Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091401.ide
2023-10-16T12:13:51.3222675Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101109.ide
2023-10-16T12:13:51.3522655Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080903.ide
2023-10-16T12:13:51.3852652Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091404.ide
2023-10-16T12:13:51.4102671Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023093003.ide
2023-10-16T12:13:51.4412669Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023083001.ide
2023-10-16T12:13:51.4722693Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082101.ide
2023-10-16T12:13:51.4992677Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072104.ide
2023-10-16T12:13:51.5322657Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091507.ide
2023-10-16T12:13:51.5582823Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080409.ide
2023-10-16T12:13:51.5862661Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090202.ide
2023-10-16T12:13:51.6512679Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101005.ide
2023-10-16T12:13:51.6882680Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082407.ide
2023-10-16T12:13:51.7232723Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082504.ide
2023-10-16T12:13:51.7512679Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092207.ide
2023-10-16T12:13:51.7792713Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101009.ide
2023-10-16T12:13:51.8072667Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081101.ide
2023-10-16T12:13:51.8342681Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090302.ide
2023-10-16T12:13:51.8652681Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091503.ide
2023-10-16T12:13:51.8962690Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090505.ide
2023-10-16T12:13:51.9292673Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081001.ide
2023-10-16T12:13:51.9532700Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080801.ide
2023-10-16T12:13:51.9823136Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080209.ide
2023-10-16T12:13:52.0142681Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090803.ide
2023-10-16T12:13:52.0422689Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091405.ide
2023-10-16T12:13:52.0692684Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082204.ide
2023-10-16T12:13:52.0982694Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090704.ide
2023-10-16T12:13:52.1272682Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080303.ide
2023-10-16T12:13:52.1602717Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081801.ide
2023-10-16T12:13:52.1882695Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082702.ide
2023-10-16T12:13:52.2162682Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090105.ide
2023-10-16T12:13:52.2442694Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081901.ide
2023-10-16T12:13:52.2732682Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092701.ide
2023-10-16T12:13:52.3122699Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072507.ide
2023-10-16T12:13:52.3492693Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100601.ide
2023-10-16T12:13:52.3772701Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091903.ide
2023-10-16T12:13:52.4072688Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091304.ide
2023-10-16T12:13:52.4372709Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090601.ide
2023-10-16T12:13:52.4722713Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082001.ide
2023-10-16T12:13:52.5002755Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090902.ide
2023-10-16T12:13:52.5282717Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072903.ide
2023-10-16T12:13:52.5572710Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081804.ide
2023-10-16T12:13:52.5862705Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091001.ide
2023-10-16T12:13:52.6142720Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023083103.ide
2023-10-16T12:13:52.6402701Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081007.ide
2023-10-16T12:13:52.6642708Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100703.ide
2023-10-16T12:13:52.6912712Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101011.ide
2023-10-16T12:13:52.7152734Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla09.vdb
2023-10-16T12:13:52.9302700Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023093001.ide
2023-10-16T12:13:52.9642706Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092109.ide
2023-10-16T12:13:53.0222712Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082505.ide
2023-10-16T12:13:53.0632731Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072404.ide
2023-10-16T12:13:53.0952742Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdl.dat
2023-10-16T12:13:53.1352748Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091109.ide
2023-10-16T12:13:53.1682718Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080405.ide
2023-10-16T12:13:53.2012764Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100407.ide
2023-10-16T12:13:53.2312720Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072101.ide
2023-10-16T12:13:53.2602742Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023073101.ide
2023-10-16T12:13:53.2912752Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090104.ide
2023-10-16T12:13:53.3202741Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100307.ide
2023-10-16T12:13:53.3512761Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092001.ide
2023-10-16T12:13:53.3842798Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100907.ide
2023-10-16T12:13:53.4213643Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072603.ide
2023-10-16T12:13:53.4572797Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023073001.ide
2023-10-16T12:13:53.4952854Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072401.ide
2023-10-16T12:13:53.5332820Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091506.ide
2023-10-16T12:13:53.5672838Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072701.ide
2023-10-16T12:13:53.5972847Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092205.ide
2023-10-16T12:13:53.6282859Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080705.ide
2023-10-16T12:13:53.6552893Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082303.ide
2023-10-16T12:13:53.6782868Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100305.ide
2023-10-16T12:13:53.7052878Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100213.ide
2023-10-16T12:13:53.7312886Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100103.ide
2023-10-16T12:13:53.7552875Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla04.vdb
2023-10-16T12:13:53.9282949Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082801.ide
2023-10-16T12:13:53.9542962Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091701.ide
2023-10-16T12:13:53.9782951Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101001.ide
2023-10-16T12:13:54.0062971Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101205.ide
2023-10-16T12:13:54.0412993Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090602.ide
2023-10-16T12:13:54.0662998Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082601.ide
2023-10-16T12:13:54.0933022Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082907.ide
2023-10-16T12:13:54.1233013Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090201.ide
2023-10-16T12:13:54.1533015Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082804.ide
2023-10-16T12:13:54.1833106Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092905.ide
2023-10-16T12:13:54.2123041Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090301.ide
2023-10-16T12:13:54.2403080Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080401.ide
2023-10-16T12:13:54.2723081Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101107.ide
2023-10-16T12:13:54.3033097Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090407.ide
2023-10-16T12:13:54.3503083Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100405.ide
2023-10-16T12:13:54.3823076Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081203.ide
2023-10-16T12:13:54.4053103Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082602.ide
2023-10-16T12:13:54.4293085Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023083101.ide
2023-10-16T12:13:54.4613103Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072901.ide
2023-10-16T12:13:54.4903144Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082701.ide
2023-10-16T12:13:54.5183150Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082205.ide
2023-10-16T12:13:54.5483129Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081704.ide
2023-10-16T12:13:54.5783155Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092101.ide
2023-10-16T12:13:54.6123180Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080205.ide
2023-10-16T12:13:54.6413166Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091110.ide
2023-10-16T12:13:54.6703201Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090603.ide
2023-10-16T12:13:54.7073183Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla02.vdb
2023-10-16T12:13:54.9053241Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072005.ide
2023-10-16T12:13:54.9403264Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092301.ide
2023-10-16T12:13:54.9693252Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla03.vdb
2023-10-16T12:13:55.1473319Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090501.ide
2023-10-16T12:13:55.1793355Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080503.ide
2023-10-16T12:13:55.2073344Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081701.ide
2023-10-16T12:13:55.2413358Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072801.ide
2023-10-16T12:13:55.2713354Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092805.ide
2023-10-16T12:13:55.2983360Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090101.ide
2023-10-16T12:13:55.3203384Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100201.ide
2023-10-16T12:13:55.3483377Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080601.ide
2023-10-16T12:13:55.3743380Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092907.ide
2023-10-16T12:13:55.4043418Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082404.ide
2023-10-16T12:13:55.4283404Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092105.ide
2023-10-16T12:13:55.4523433Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082501.ide
2023-10-16T12:13:55.4763417Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092601.ide
2023-10-16T12:13:55.5023704Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023071906.ide
2023-10-16T12:13:55.5373441Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla05.vdb
2023-10-16T12:13:55.7583492Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072607.ide
2023-10-16T12:13:55.7833480Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092605.ide
2023-10-16T12:13:55.8135513Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100101.ide
2023-10-16T12:13:55.8435803Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100801.ide
2023-10-16T12:13:55.8685547Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091305.ide
2023-10-16T12:13:55.9005560Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023073107.ide
2023-10-16T12:13:55.9315528Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090401.ide
2023-10-16T12:13:55.9626842Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092501.ide
2023-10-16T12:13:55.9905714Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081805.ide
2023-10-16T12:13:56.0225633Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092303.ide
2023-10-16T12:13:56.0575600Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072702.ide
2023-10-16T12:13:56.0885619Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072501.ide
2023-10-16T12:13:56.1175603Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080703.ide
2023-10-16T12:13:56.1445656Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072107.ide
2023-10-16T12:13:56.1745620Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092803.ide
2023-10-16T12:13:56.2035636Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081503.ide
2023-10-16T12:13:56.2315636Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080301.ide
2023-10-16T12:13:56.2585649Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092505.ide
2023-10-16T12:13:56.2935687Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092401.ide
2023-10-16T12:13:56.3295654Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072002.ide
2023-10-16T12:13:56.3625660Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\manifestdata.dat
2023-10-16T12:13:56.3975704Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092007.ide
2023-10-16T12:13:56.4295708Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081902.ide
2023-10-16T12:13:56.4585847Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090901.ide
2023-10-16T12:13:56.4895715Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081605.ide
2023-10-16T12:13:56.5195712Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023083002.ide
2023-10-16T12:13:56.5525729Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072202.ide
2023-10-16T12:13:56.5795723Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072807.ide
2023-10-16T12:13:56.6085746Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100501.ide
2023-10-16T12:13:56.6425727Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023083102.ide
2023-10-16T12:13:56.6775756Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082105.ide
2023-10-16T12:13:56.7045742Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091103.ide
2023-10-16T12:13:56.7355792Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072301.ide
2023-10-16T12:13:56.7615779Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080901.ide
2023-10-16T12:13:56.7915766Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100903.ide
2023-10-16T12:13:56.8165787Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082201.ide
2023-10-16T12:13:56.8475780Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092507.ide
2023-10-16T12:13:56.8745797Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092607.ide
2023-10-16T12:13:56.9025801Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023090504.ide
2023-10-16T12:13:56.9325814Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101201.ide
2023-10-16T12:13:56.9595827Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091202.ide
2023-10-16T12:13:56.9905823Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081201.ide
2023-10-16T12:13:57.0185837Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082901.ide
2023-10-16T12:13:57.0475861Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101301.ide
2023-10-16T12:13:57.0975879Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080105.ide
2023-10-16T12:13:57.1295852Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081705.ide
2023-10-16T12:13:57.1585886Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081107.ide
2023-10-16T12:13:57.2085889Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla07.vdb
2023-10-16T12:13:57.4345944Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091806.ide
2023-10-16T12:13:57.4617201Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080307.ide
2023-10-16T12:13:57.4945943Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091801.ide
2023-10-16T12:13:57.5245962Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081301.ide
2023-10-16T12:13:57.5595988Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023083005.ide
2023-10-16T12:13:57.5885969Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082104.ide
2023-10-16T12:13:57.6156043Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072001.ide
2023-10-16T12:13:57.6496025Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082403.ide
2023-10-16T12:13:57.6796005Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100803.ide
2023-10-16T12:13:57.7086012Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023100209.ide
2023-10-16T12:13:57.7386026Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092705.ide
2023-10-16T12:13:57.7666026Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023072201.ide
2023-10-16T12:13:57.8006029Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081501.ide
2023-10-16T12:13:57.8367493Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092003.ide
2023-10-16T12:13:57.8696131Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092801.ide
2023-10-16T12:13:57.9046063Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023071903.ide
2023-10-16T12:13:57.9376082Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091203.ide
2023-10-16T12:13:57.9656085Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023073105.ide
2023-10-16T12:13:57.9936070Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091601.ide
2023-10-16T12:13:58.0206845Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081005.ide
2023-10-16T12:13:58.0496414Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080103.ide
2023-10-16T12:13:58.0786110Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023101103.ide
2023-10-16T12:13:58.1056101Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081105.ide
2023-10-16T12:13:58.1346134Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla10.vdb
2023-10-16T12:13:58.6496270Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023080501.ide
2023-10-16T12:13:58.6746243Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091301.ide
2023-10-16T12:13:58.7086258Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023092901.ide
2023-10-16T12:13:58.7356255Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023081403.ide
2023-10-16T12:13:58.7596268Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023082904.ide
2023-10-16T12:13:58.7866251Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023091907.ide
2023-10-16T12:13:58.8166284Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023071801.ide
2023-10-16T12:13:58.8406314Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\2023071806.ide
2023-10-16T12:13:58.8706307Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\vdla08.vdb
2023-10-16T12:13:59.1936393Z INFO : Extracting package APPFEED_2023.7.19.10.4.2.1.093f9a3dae.zip
2023-10-16T12:13:59.1946389Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\appfeed_part_0001.dat
2023-10-16T12:13:59.2296390Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\appfeed_manifest.dat
2023-10-16T12:13:59.2596365Z INFO : Extracting package LocalRepData_2023.10.12.12.40.54.1.262c1b446b.zip
2023-10-16T12:13:59.2596365Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config\\LocalReputationData\\signerrep.dat
2023-10-16T12:13:59.2936399Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config\\LocalReputationData\\filerep.dat
2023-10-16T12:13:59.3586395Z INFO : Extracting package behave_2023.10.12.19.6.0.1.c2f6742804.zip
2023-10-16T12:13:59.3586395Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config\\BehavioralRules\\behave.dec
2023-10-16T12:13:59.4846417Z INFO : Extracting package TELEMSUP_2023.9.7.15.8.10.1.3e4da4447f.zip
2023-10-16T12:13:59.4846417Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\telemsup/TelemetryConfig.json
2023-10-16T12:13:59.5086455Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\telemsup/telemetry.manifest.dat
2023-10-16T12:13:59.5446453Z INFO : Extracting package REPAIRKIT_2023.9.11.12.21.2.3.cf548a3592.zip
2023-10-16T12:13:59.5446453Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/publish_services.kitx.dat
2023-10-16T12:13:59.5696502Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_amsi.kitx.dat
2023-10-16T12:13:59.5956460Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/publish_drivers.kitx.dat
2023-10-16T12:13:59.6266459Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_uc.kitx.dat
2023-10-16T12:13:59.6606461Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_shs.kitx.dat
2023-10-16T12:13:59.6886503Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_sse.kitx.dat
2023-10-16T12:13:59.7126460Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_ntp.kitx.dat
2023-10-16T12:13:59.7396514Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_sfs.kitx.dat
2023-10-16T12:13:59.7646491Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_sed.kitx.dat
2023-10-16T12:13:59.8552124Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_esh.kitx.dat
2023-10-16T12:13:59.8812148Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_fim.kitx.dat
2023-10-16T12:13:59.9092178Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_enc.kitx.dat
2023-10-16T12:13:59.9392137Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_tamper_protection_enabled.kitx.dat
2023-10-16T12:13:59.9692154Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_service.kitx.dat
2023-10-16T12:14:00.0022171Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/repairkit.xml
2023-10-16T12:14:00.0282162Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_adapter.kitx.dat
2023-10-16T12:14:00.0542176Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_sau.kitx.dat
2023-10-16T12:14:00.0832175Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_mcs.kitx.dat
2023-10-16T12:14:00.1072182Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/immediate_install.kitx.dat
2023-10-16T12:14:00.1372180Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_liveterminal.kitx.dat
2023-10-16T12:14:00.1622186Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/repairkit.manifest.dat
2023-10-16T12:14:00.1889811Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_config.kitx.dat
2023-10-16T12:14:00.2149811Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_mtr.kitx.dat
2023-10-16T12:14:00.2399796Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_hmpa.kitx.dat
2023-10-16T12:14:00.2709848Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_signatures.kitx.dat
2023-10-16T12:14:00.2959827Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_mr.kitx.dat
2023-10-16T12:14:00.3249861Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/configuration.json
2023-10-16T12:14:00.3489896Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\repairkit/verify_lquery.kitx.dat
2023-10-16T12:14:00.5409886Z INFO : Extracting package 97B6A561-5F87-4A2E-A4FE-177F48D8899F_2023.7.19.9.50.42.1.b6fb0fdb35.zip
2023-10-16T12:14:00.5409886Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_win32sysloader.pyd
2023-10-16T12:14:00.5829921Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\VCRUNTIME140.dll
2023-10-16T12:14:00.6239901Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\libcrypto-1_1.dll
2023-10-16T12:14:00.7459913Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\pythoncom37.dll
2023-10-16T12:14:00.7989958Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\ucrtbase.dll
2023-10-16T12:14:00.8779933Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-runtime-l1-1-0.dll
2023-10-16T12:14:00.9209995Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-processthreads-l1-1-1.dll
2023-10-16T12:14:00.9559997Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-namedpipe-l1-1-0.dll
2023-10-16T12:14:00.9929978Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-synch-l1-1-0.dll
2023-10-16T12:14:01.0359983Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_lzma.pyd
2023-10-16T12:14:01.0829984Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\AVRemove.exe
2023-10-16T12:14:01.3120034Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32process.pyd
2023-10-16T12:14:01.3580034Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\libssl-1_1.dll
2023-10-16T12:14:01.4220052Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_bz2.pyd
2023-10-16T12:14:01.4720071Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-debug-l1-1-0.dll
2023-10-16T12:14:01.5170049Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-file-l1-2-0.dll
2023-10-16T12:14:01.5640089Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_ctypes.pyd
2023-10-16T12:14:01.6110090Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-processenvironment-l1-1-0.dll
2023-10-16T12:14:01.6560122Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-file-l1-1-0.dll
2023-10-16T12:14:01.6960107Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_ssl.pyd
2023-10-16T12:14:01.7410129Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\manifest.dat
2023-10-16T12:14:01.7750149Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\unicodedata.pyd
2023-10-16T12:14:01.8530139Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-string-l1-1-0.dll
2023-10-16T12:14:01.8910153Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-environment-l1-1-0.dll
2023-10-16T12:14:01.9300181Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\base_library.zip
2023-10-16T12:14:01.9840189Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32api.pyd
2023-10-16T12:14:02.0220168Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-errorhandling-l1-1-0.dll
2023-10-16T12:14:02.0520167Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-utility-l1-1-0.dll
2023-10-16T12:14:02.0850184Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-conio-l1-1-0.dll
2023-10-16T12:14:02.1220208Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\python37.dll
2023-10-16T12:14:02.3420208Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\pyexpat.pyd
2023-10-16T12:14:02.3800231Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\AVRemoveW.exe
2023-10-16T12:14:02.6110272Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\perfmon.pyd
2023-10-16T12:14:02.6500279Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-libraryloader-l1-1-0.dll
2023-10-16T12:14:02.6860275Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-profile-l1-1-0.dll
2023-10-16T12:14:02.7280300Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-memory-l1-1-0.dll
2023-10-16T12:14:02.7650302Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-sysinfo-l1-1-0.dll
2023-10-16T12:14:02.8030332Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\data.zip
2023-10-16T12:14:02.8560328Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32trace.pyd
2023-10-16T12:14:02.8910318Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\servicemanager.pyd
2023-10-16T12:14:02.9260318Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\version.txt
2023-10-16T12:14:02.9590344Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-localization-l1-2-0.dll
2023-10-16T12:14:03.0010338Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-string-l1-1-0.dll
2023-10-16T12:14:03.0430377Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-time-l1-1-0.dll
2023-10-16T12:14:03.0790369Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32security.pyd
2023-10-16T12:14:03.1180387Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32ui.pyd
2023-10-16T12:14:03.1790370Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-process-l1-1-0.dll
2023-10-16T12:14:03.2110381Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_elementtree.pyd
2023-10-16T12:14:03.2670406Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\select.pyd
2023-10-16T12:14:03.3040411Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32evtlog.pyd
2023-10-16T12:14:03.3420396Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_hashlib.pyd
2023-10-16T12:14:03.3760409Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\license_agreements.txt
2023-10-16T12:14:03.4090394Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32file.pyd
2023-10-16T12:14:03.4600448Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-heap-l1-1-0.dll
2023-10-16T12:14:03.5060441Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\AVRemoveW.exe.manifest
2023-10-16T12:14:03.5440427Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-interlocked-l1-1-0.dll
2023-10-16T12:14:03.5830459Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\_socket.pyd
2023-10-16T12:14:03.6220470Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-locale-l1-1-0.dll
2023-10-16T12:14:03.6671196Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-convert-l1-1-0.dll
2023-10-16T12:14:03.7040488Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32pipe.pyd
2023-10-16T12:14:03.7390479Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-processthreads-l1-1-0.dll
2023-10-16T12:14:03.7750465Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\library.zip
2023-10-16T12:14:03.9290480Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-multibyte-l1-1-0.dll
2023-10-16T12:14:03.9650570Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-file-l2-1-0.dll
2023-10-16T12:14:03.9990535Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-timezone-l1-1-0.dll
2023-10-16T12:14:04.0424792Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-console-l1-1-0.dll
2023-10-16T12:14:04.0910553Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-rtlsupport-l1-1-0.dll
2023-10-16T12:14:04.1320545Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32event.pyd
2023-10-16T12:14:04.1710538Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-handle-l1-1-0.dll
2023-10-16T12:14:04.2070552Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-synch-l1-2-0.dll
2023-10-16T12:14:04.2420608Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\pywintypes37.dll
2023-10-16T12:14:04.2880545Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32service.pyd
2023-10-16T12:14:04.3260594Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-util-l1-1-0.dll
2023-10-16T12:14:04.3640597Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-heap-l1-1-0.dll
2023-10-16T12:14:04.3960592Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\AVRemove.exe.manifest
2023-10-16T12:14:04.4270581Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32wnet.pyd
2023-10-16T12:14:04.4650619Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-core-datetime-l1-1-0.dll
2023-10-16T12:14:04.5060595Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\mfc140u.dll
2023-10-16T12:14:04.7710646Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\win32com/shell/shell.pyd
2023-10-16T12:14:04.8220648Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-math-l1-1-0.dll
2023-10-16T12:14:04.8650668Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-stdio-l1-1-0.dll
2023-10-16T12:14:04.9070657Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\crt\\api-ms-win-crt-filesystem-l1-1-0.dll
2023-10-16T12:14:04.9430670Z INFO : Extracting package LocalRepData_2023.10.12.12.40.54.1.262c1b446b.zip
2023-10-16T12:14:04.9430670Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\signerrep.dat
2023-10-16T12:14:04.9760665Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\filerep.dat
2023-10-16T12:14:05.1970799Z INFO : Extracting package ML_MODEL2_64_2023.7.5.14.14.9.5.d2856349f5.zip
2023-10-16T12:14:05.1980706Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\scan\\manifest.dat
2023-10-16T12:14:05.2380821Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\scan\\model.dat
2023-10-16T12:14:06.5780909Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\scan\\model.dll
2023-10-16T12:14:06.8181088Z INFO : Extracting package ML_MODEL2_64_2023.7.5.14.13.50.2.d2856349f5.zip
2023-10-16T12:14:06.8181088Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\telemetry\\manifest.dat
2023-10-16T12:14:06.8510960Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\telemetry\\model.dat
2023-10-16T12:14:08.1851099Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\telemetry\\model.dll
2023-10-16T12:14:08.2691140Z INFO : Extracting package DOC_MODEL2_64_2023.9.7.15.13.44.2.088fafc622.zip
2023-10-16T12:14:08.2691140Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\docmodel\\static_rtf.dat
2023-10-16T12:14:08.3031138Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\docmodel\\manifest.dat
2023-10-16T12:14:08.3291143Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\docmodel\\static_office.dat
2023-10-16T12:14:08.3681129Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\docmodel\\static_pdf.dat
2023-10-16T12:14:08.4081133Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\docmodel\\onnxruntime.dll
2023-10-16T12:14:08.7431174Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\docmodel\\docmodel.dll
2023-10-16T12:14:08.8041209Z INFO : Extracting package D3147E4B-BECB-4CE5-A2B4-DD098CD8AEFE_2023.9.12.10.17.34.1.058b9fdc2a.zip
2023-10-16T12:14:08.8041209Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules-manifest.dat
2023-10-16T12:14:08.8431197Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\ProductAnalysis/ProductAnalysis.json
2023-10-16T12:14:08.8761683Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_db8d2865-b3be-4f3b-9b52-2ebc7798a097.json
2023-10-16T12:14:08.9091680Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_00d7f9f5-ea33-47d1-82f9-7ab2f34e16de.json
2023-10-16T12:14:08.9411683Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_a3c47481-7551-45a4-8300-d337d415a698.json
2023-10-16T12:14:08.9741679Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_b2733591-8f45-4792-abb1-46353a691adf.json
2023-10-16T12:14:09.0111745Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_635689ec-822a-47fd-9751-1df4bc687c62.json
2023-10-16T12:14:09.0502518Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_57fbc943-6bd0-409f-959b-d5293b0c1b95.json
2023-10-16T12:14:09.0861704Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_ce56b6b1-078d-48db-ad94-fdd281a627e8.json
2023-10-16T12:14:09.1201723Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_027b7aef-91a4-4a92-8298-a69a6c1e383a.json
2023-10-16T12:14:09.1571708Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_3385240d-2f2c-418e-bf0a-4b766f43622b.json
2023-10-16T12:14:09.1921718Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_1c41fa8a-9ad4-4279-a5b0-88d0650e642f.json
2023-10-16T12:14:09.2301727Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_e75c3b1c-2829-44ec-b5ad-792887f9315c.json
2023-10-16T12:14:09.2621742Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_69a5a151-9c70-40bc-8db1-727a57e38cc6.json
2023-10-16T12:14:09.2951739Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_4975c7dc-9081-43c4-93b4-cba67bfc0da8.json
2023-10-16T12:14:09.4051777Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_89f1a21a-a0ed-49fd-8479-5760d644488d.json
2023-10-16T12:14:09.4571788Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_00829fd0-047f-438f-a605-1068822e90d5.json
2023-10-16T12:14:09.4941801Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_102b53e8-f288-4e05-a767-ab670f46aea6.json
2023-10-16T12:14:09.5311785Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_d72b7e64-12d2-449f-bd8d-7166d45cf249.json
2023-10-16T12:14:09.5661808Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_7a687797-5914-42a7-9c51-477edac2164d.json
2023-10-16T12:14:09.6001823Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_0fc17b15-6ab0-4cd2-a2c9-78dc94e8b5d8.json
2023-10-16T12:14:09.6311834Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_f43ed081-4ba5-480a-9eb2-6839ce982592.json
2023-10-16T12:14:09.6641845Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_fc235957-cb02-4eec-a805-14ae2fe4bff6.json
2023-10-16T12:14:09.6991857Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_d9335bea-fa81-46ef-a0ba-914002f39837.json
2023-10-16T12:14:09.7311862Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_4fce32a1-147c-415e-942c-8f36a35b2334.json
2023-10-16T12:14:09.7681895Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_e1346a9e-a7bd-4015-b72c-5024c3c9b66e.json
2023-10-16T12:14:09.8032081Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/ExtendedRules/configfilesettings.json
2023-10-16T12:14:09.8381896Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_759ed7be-e2e6-4e9e-b959-a5589af5a7e4.json
2023-10-16T12:14:09.8711927Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_8bafaa86-e588-47ca-bd67-f0978174dfe9.json
2023-10-16T12:14:09.9071926Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/version
2023-10-16T12:14:09.9431923Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_3315f7b2-d2e4-40d8-8175-1d7325453a8d.json
2023-10-16T12:14:09.9771929Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_78ac8604-6558-495a-8674-b0156e9a51a7.json
2023-10-16T12:14:10.0081933Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_a71e9b46-86b2-4857-94a9-625aea31495d.json
2023-10-16T12:14:10.0421966Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_7ca35d87-5b82-4a3a-9142-8d1dea36b982.json
2023-10-16T12:14:10.0751947Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/logconfig.json
2023-10-16T12:14:10.1112002Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_53474c6a-6038-47e6-abc7-45ca01219016.json
2023-10-16T12:14:10.1492004Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_7f849b01-f9a7-4804-a03d-be65267e6a85.json
2023-10-16T12:14:10.1822008Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_6dbdf6a3-90be-4356-9f7a-be35248fc168.json
2023-10-16T12:14:10.2182000Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_17c336ed-7118-454a-9599-082ce76af8e5.json
2023-10-16T12:14:10.2512023Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_79a1c4b9-4320-437e-b03a-626000e8550d.json
2023-10-16T12:14:10.2872028Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_f9a8cb26-2ea9-44b7-bd59-2edd7577f53f.json
2023-10-16T12:14:10.3202037Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_a0f23a3c-68f3-4196-8137-1edb58149ed0.json
2023-10-16T12:14:10.3652075Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_70af08d7-cbce-4323-8673-058ab0b109fc.json
2023-10-16T12:14:10.3982056Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_13d87908-3f8b-4135-9696-42988a5cdaa3.json
2023-10-16T12:14:10.4322082Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\rules/rule_64539252-ee88-4ddf-9779-660d665b6675.json
2023-10-16T12:14:10.4672126Z INFO : Extracting package FIMFEED_2023.7.19.10.37.41.1.a77332a765.zip
2023-10-16T12:14:10.4672126Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\fimfeed.xml
2023-10-16T12:14:10.4962086Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\fimfeed_manifest.dat
2023-10-16T12:14:10.5322078Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\fimfeed_version.xml
2023-10-16T12:14:10.5652095Z INFO : Extracting package EPIPS_data_2023.10.12.9.48.9.1.ec3366093f.zip
2023-10-16T12:14:10.5662105Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\2023101201.ips
2023-10-16T12:14:10.6032126Z INFO : Extracting package NTP_OVERRIDES_2023.9.7.15.6.32.1.62c740caba.zip
2023-10-16T12:14:10.6042121Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\policy_overrides\\services.json
2023-10-16T12:14:10.6292111Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\policy_overrides\\nics.json
2023-10-16T12:14:10.6632133Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\policy_overrides\\overrides_manifest.dat
2023-10-16T12:14:10.7192158Z INFO : Extracting package CEPNGSRVFLAGS_2023.9.18.10.18.9.15.0928442cc8.zip
2023-10-16T12:14:10.7192158Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\flags\\cepngsrv.json
2023-10-16T12:14:10.7502143Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\flags_cepngsrv_manifest.dat
2023-10-16T12:14:10.7772163Z INFO : Extracting package WindowsCloudServer_2023.1.3.5.0.0574a151e1.zip
2023-10-16T12:14:10.7782151Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\order.xml
2023-10-16T12:14:10.8002134Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\version
2023-10-16T12:14:10.8252149Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config\\SspConf.json
2023-10-16T12:14:10.9002197Z INFO : Extracting package SDU64_6.15.1417.58ff7d17d5.zip
2023-10-16T12:14:10.9012181Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\SduAdapter.dll
2023-10-16T12:14:10.9652197Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\SophosSduUninstall.exe
2023-10-16T12:14:11.0442250Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\integrity.dat
2023-10-16T12:14:11.0792245Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\license_agreements.txt
2023-10-16T12:14:11.1072263Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\manifest.dat
2023-10-16T12:14:11.1452258Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\sdu.ico
2023-10-16T12:14:11.1762304Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\sducli.exe
2023-10-16T12:14:11.2792307Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\sduconfig.xml
2023-10-16T12:14:11.3052296Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\sdugui.exe
2023-10-16T12:14:11.5352394Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sdu64\\setup64.dll
2023-10-16T12:14:11.7962400Z INFO : Extracting package NTP64_1.17.3508.7ed54d878a.zip
2023-10-16T12:14:11.7972452Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Setup64.dll
2023-10-16T12:14:11.8922416Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\manifest.dat
2023-10-16T12:14:11.9252458Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Heartbeat/Config/Heartbeat.xml
2023-10-16T12:14:11.9522437Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/HealthApi.dll
2023-10-16T12:14:12.0002459Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/Notice.SophosIPS.txt
2023-10-16T12:14:12.0282518Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/Notice.txt
2023-10-16T12:14:12.1362660Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/Sntp.cat
2023-10-16T12:14:12.1612517Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/Sntp.inf
2023-10-16T12:14:12.1902517Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/Sntp.man
2023-10-16T12:14:12.2172513Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/Sntp.sys
2023-10-16T12:14:12.2592554Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/SophosIPS.exe
2023-10-16T12:14:12.3752558Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/SophosNetFilter.exe
2023-10-16T12:14:12.7082651Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/SophosNtpService.exe
2023-10-16T12:14:13.2712773Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/SophosNtpTelemetry.exe
2023-10-16T12:14:13.3302775Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/SophosNtpUninstall.exe
2023-10-16T12:14:13.5312840Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/concrt140.dll
2023-10-16T12:14:13.6312857Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/integrity.dat
2023-10-16T12:14:13.6592842Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/integrity_scm.dat
2023-10-16T12:14:13.6922903Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/magic.mime
2023-10-16T12:14:13.7176490Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/msvcp140.dll
2023-10-16T12:14:13.7696486Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/sf_engine.dll
2023-10-16T12:14:13.8026490Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/sof.dat
2023-10-16T12:14:13.8326486Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/vccorlib140.dll
2023-10-16T12:14:13.8796487Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/vcruntime140.dll
2023-10-16T12:14:13.9166654Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IOAV/x64/sophosofficeav.dll
2023-10-16T12:14:13.9756531Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IOAV/x86/sophosofficeav.dll
2023-10-16T12:14:14.0386536Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS/aac.conf
2023-10-16T12:14:14.0686566Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS/extras.rules
2023-10-16T12:14:14.0976565Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS/system.rules
2023-10-16T12:14:14.1266568Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Configuration/classification.config
2023-10-16T12:14:14.1546566Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Configuration/reference.config
2023-10-16T12:14:14.1866567Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Configuration/sophosips.conf
2023-10-16T12:14:14.2176622Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Configuration/unicode.map
2023-10-16T12:14:14.2556686Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Modules/sophos_module.dll
2023-10-16T12:14:14.3286630Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_dce2.dll
2023-10-16T12:14:14.3686616Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_dns.dll
2023-10-16T12:14:14.3976627Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_ftptelnet.dll
2023-10-16T12:14:14.4266633Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_imap.dll
2023-10-16T12:14:14.4566642Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_pop.dll
2023-10-16T12:14:14.4856669Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_smtp.dll
2023-10-16T12:14:14.5196663Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_ssh.dll
2023-10-16T12:14:14.5506692Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/IPS Dynamic Preprocessors/sf_ssl.dll
2023-10-16T12:14:14.5786665Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/ZtnaDriver/Notice.SophosZTNA.txt
2023-10-16T12:14:14.6026668Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/ZtnaDriver/sophosztnatap.cat
2023-10-16T12:14:14.6347488Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/ZtnaDriver/sophosztnatap.inf
2023-10-16T12:14:14.6706675Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ntp64\\Sophos/Sophos Network Threat Protection/ZtnaDriver/sophosztnatap.sys
2023-10-16T12:14:14.7326692Z INFO : Extracting package FIM_1.0.3.449.18e0be72bd.zip
2023-10-16T12:14:14.7336740Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\Setup64.dll
2023-10-16T12:14:14.8606696Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\SophosFIMService.exe
2023-10-16T12:14:15.0986898Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\SophosFIMTelemetry.exe
2023-10-16T12:14:15.1596770Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\SophosFIMUninstaller.exe
2023-10-16T12:14:15.2476808Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\SophosFimEventProvider.dll
2023-10-16T12:14:15.3348446Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\SophosFimEventProvider.man
2023-10-16T12:14:15.4266865Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\integrity.dat
2023-10-16T12:14:15.7726938Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\license_agreements.txt
2023-10-16T12:14:15.9566938Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\manifest.dat
2023-10-16T12:14:16.1086982Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\Config/FimFeed.xml
2023-10-16T12:14:16.5217129Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\fim\\Database/SophosFIM.db
2023-10-16T12:14:16.7327107Z INFO : Extracting package EFW64_2.3.93.dbbbf83698.zip
2023-10-16T12:14:16.7327107Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\efw64\\EfwAdapter.dll
2023-10-16T12:14:17.1503284Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\efw64\\EfwTelemetryPlugin.exe
2023-10-16T12:14:17.2987191Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\efw64\\SophosEfwUninstall.exe
2023-10-16T12:14:17.7267258Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\efw64\\integrity.dat
2023-10-16T12:14:18.0301552Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\efw64\\manifest.dat
2023-10-16T12:14:18.2776041Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\efw64\\setup64.dll
2023-10-16T12:14:18.6525434Z INFO : Extracting package ESH64_3.4.530.0.ab15291c67.zip
2023-10-16T12:14:18.6525434Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Setup64.dll
2023-10-16T12:14:18.8815490Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\integrity.dat.unsigned
2023-10-16T12:14:19.0955558Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\manifest.dat
2023-10-16T12:14:19.4715546Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Configuration/EshConfig.json
2023-10-16T12:14:19.8640397Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/GatherDiag.dll
2023-10-16T12:14:20.1006741Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Logging.dll
2023-10-16T12:14:20.3275683Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/MLFileInfo.exe
2023-10-16T12:14:20.5585704Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Newtonsoft.Json.dll
2023-10-16T12:14:20.7847981Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SEDComms.dll
2023-10-16T12:14:20.8955820Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SedAsyncComms.dll
2023-10-16T12:14:21.0137121Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SophRules.dll
2023-10-16T12:14:21.0685796Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Sophos.Encryption.DeviceEncryptionReportingPlugin.dll
2023-10-16T12:14:21.1835779Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SophosDiag.Common.dll
2023-10-16T12:14:21.2956971Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SophosDiag.Troubleshooting.dll
2023-10-16T12:14:21.3755817Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SophosDiag.exe
2023-10-16T12:14:21.7385911Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SophosESH.exe
2023-10-16T12:14:21.8745884Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/SophosESHUninstall.exe
2023-10-16T12:14:22.0985913Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/integrity.dat
2023-10-16T12:14:22.1707640Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Configuration/ComponentMap.json
2023-10-16T12:14:22.2425929Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Configuration/ProductMap.json
2023-10-16T12:14:22.3146035Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Locale/en-US.json
2023-10-16T12:14:22.3926006Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\esh64\\Sophos/Endpoint Self Help/Telemetry/SophosESHTelemetry.exe
2023-10-16T12:14:22.5829067Z INFO : Extracting package SME64_1.8.25.1.cd5d943837.zip
2023-10-16T12:14:22.5829067Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\Setup64.dll
2023-10-16T12:14:22.7779027Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\SophosSMEUninstall.exe
2023-10-16T12:14:22.9599095Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\SophosSMEValidator.exe
2023-10-16T12:14:23.1389123Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\integrity.dat
2023-10-16T12:14:23.1999151Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sme64\\manifest.dat
2023-10-16T12:14:23.3529154Z INFO : Extracting package AMSI64_1.9.2098.130a9fe76d.zip
2023-10-16T12:14:23.3529154Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Setup.dll
2023-10-16T12:14:23.5209126Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\SophosACSenabledTest.exe
2023-10-16T12:14:23.6322296Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\manifest.dat
2023-10-16T12:14:23.6849148Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Sophos/AMSI Protection/SophosAmsiProvider.dll
2023-10-16T12:14:23.8889165Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Sophos/AMSI Protection/SophosAmsiTelemetryCollector.exe
2023-10-16T12:14:24.0049179Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Sophos/AMSI Protection/SophosAmsiUninstall.exe
2023-10-16T12:14:24.1739197Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Sophos/AMSI Protection/integrity.dat
2023-10-16T12:14:24.2399238Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Sophos/AMSI Protection/x86/SophosAmsiAdapter.dll
2023-10-16T12:14:24.3989285Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\amsi64\\Sophos/AMSI Protection/x86/SophosAmsiProvider.dll
2023-10-16T12:14:24.7569268Z INFO : Extracting package UI64_2.9.564.957202bcf2.zip
2023-10-16T12:14:24.7579326Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\manifest.dat
2023-10-16T12:14:24.8401894Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\setup64.dll
2023-10-16T12:14:25.0447309Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Adapter.dll
2023-10-16T12:14:25.1652067Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Microsoft.Web.WebView2.Core.dll
2023-10-16T12:14:25.2369435Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Microsoft.Web.WebView2.Wpf.dll
2023-10-16T12:14:25.3034778Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/NLog.config
2023-10-16T12:14:25.3762138Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/NLog.dll
2023-10-16T12:14:25.5472146Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Newtonsoft.Json.dll
2023-10-16T12:14:25.7102180Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/SEDComms.dll
2023-10-16T12:14:25.8102188Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/SedAsyncComms.dll
2023-10-16T12:14:25.8842229Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Sophos UI.exe
2023-10-16T12:14:26.1055598Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Sophos UI.exe.config
2023-10-16T12:14:26.1722312Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/SophosScanLauncher.exe
2023-10-16T12:14:26.2632312Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/SophosUIShellExt.dll
2023-10-16T12:14:26.3702326Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/SophosUITelemetry.exe
2023-10-16T12:14:26.4962372Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/SophosUIUninstall.exe
2023-10-16T12:14:26.6842429Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/WebView2Loader.dll
2023-10-16T12:14:26.7842463Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/integrity.dat
2023-10-16T12:14:26.8392441Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.cs-cz.json
2023-10-16T12:14:26.9062482Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.de-de.json
2023-10-16T12:14:26.9602477Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.en-us.json
2023-10-16T12:14:27.0242494Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.es-es.json
2023-10-16T12:14:27.1082585Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.fr-fr.json
2023-10-16T12:14:27.1742528Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.it-it.json
2023-10-16T12:14:27.2462602Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.ja-jp.json
2023-10-16T12:14:27.3592564Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.ko-kr.json
2023-10-16T12:14:27.4348608Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.pl-pl.json
2023-10-16T12:14:27.5212639Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.pt-br.json
2023-10-16T12:14:27.5782618Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.zh-cn.json
2023-10-16T12:14:27.6362631Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/Events/Events.zh-tw.json
2023-10-16T12:14:27.7312646Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/cs/Sophos UI.resources.dll
2023-10-16T12:14:27.8264773Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/de/Sophos UI.resources.dll
2023-10-16T12:14:27.9112698Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/es/Sophos UI.resources.dll
2023-10-16T12:14:27.9822717Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/fr/Sophos UI.resources.dll
2023-10-16T12:14:28.0512727Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/it/Sophos UI.resources.dll
2023-10-16T12:14:28.1202760Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/ja/Sophos UI.resources.dll
2023-10-16T12:14:28.1982750Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/ko-KR/Sophos UI.resources.dll
2023-10-16T12:14:28.2847620Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/pl/Sophos UI.resources.dll
2023-10-16T12:14:28.3604213Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/pt-BR/Sophos UI.resources.dll
2023-10-16T12:14:28.4142821Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/zh-Hans/Sophos UI.resources.dll
2023-10-16T12:14:28.5082875Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\ui64\\Sophos/Sophos UI/zh-Hant/Sophos UI.resources.dll
2023-10-16T12:14:28.7392915Z INFO : Extracting package SFS64_1.11.3.879.653f09dd80.zip
2023-10-16T12:14:28.7402892Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\Setup64.dll
2023-10-16T12:14:28.9652926Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\SophosFSVerify.exe
2023-10-16T12:14:29.1357315Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\manifest.dat
2023-10-16T12:14:29.2313001Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\Sophos/Sophos File Scanner/SophosFS.exe
2023-10-16T12:14:29.4353070Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\Sophos/Sophos File Scanner/SophosFSTelemetry.exe
2023-10-16T12:14:29.6303032Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\Sophos/Sophos File Scanner/SophosFSUninstall.exe
2023-10-16T12:14:29.9123519Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\Sophos/Sophos File Scanner/SophosFileScanner.exe
2023-10-16T12:14:30.3555738Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sfs64\\Sophos/Sophos File Scanner/integrity.dat
2023-10-16T12:14:30.5248768Z INFO : Extracting package SHS_2.12.883.575a05384a.zip
2023-10-16T12:14:30.5255091Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\ShsAdapter.dll
2023-10-16T12:14:30.6475097Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\SophosHealth.exe
2023-10-16T12:14:31.0072906Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\SophosHealthClient.exe
2023-10-16T12:14:31.1827560Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\Uninstall.exe
2023-10-16T12:14:31.3265234Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\integrity.dat
2023-10-16T12:14:31.3677027Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\manifest.dat
2023-10-16T12:14:31.4295774Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\setup.dll
2023-10-16T12:14:31.6961521Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\shs\\sof.dat
2023-10-16T12:14:31.8330872Z INFO : Extracting package MCS_4.19.561.f429d0430f.zip
2023-10-16T12:14:31.8340862Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\manifest.dat
2023-10-16T12:14:31.9000891Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\setup.dll
2023-10-16T12:14:32.1202525Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Certificates/Management Communications System/sophosca3.crl
2023-10-16T12:14:32.1660963Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Certificates/Management Communications System/sophosca3.crt
2023-10-16T12:14:32.2344625Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Certificates/Management Communications System/sophosca4.crl
2023-10-16T12:14:32.3060960Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Certificates/Management Communications System/sophosca4.crt
2023-10-16T12:14:32.3790989Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/McsAgent.exe
2023-10-16T12:14:32.6521065Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/McsClient.exe
2023-10-16T12:14:32.9004179Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/McsEvents.dll
2023-10-16T12:14:32.9812047Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/NOTICE.txt
2023-10-16T12:14:33.0411072Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Uninstall.exe
2023-10-16T12:14:33.2004557Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/integrity.dat
2023-10-16T12:14:33.2591096Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/sof.dat
2023-10-16T12:14:33.3011112Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/DerivedSettings_ThreatProtection.xml
2023-10-16T12:14:33.3611112Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/LocalPolicy.xml
2023-10-16T12:14:33.4231210Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_CommandRoutingOverride.xml
2023-10-16T12:14:33.5051160Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_CommandTypeToAdapter.xml
2023-10-16T12:14:33.5777632Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_EventTypeToAdapter.xml
2023-10-16T12:14:33.6281179Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_FeatureToAdapters.xml
2023-10-16T12:14:33.6761256Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_NamespaceUpdateOverride.xml
2023-10-16T12:14:33.7461212Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_PolicyTypeToApp.xml
2023-10-16T12:14:33.8293690Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_PolicyValuesForState.xml
2023-10-16T12:14:33.9101196Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Map_VirtualAdapters.xml
2023-10-16T12:14:33.9595736Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_ApplicationControl.xml
2023-10-16T12:14:34.0551240Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_Authority.xml
2023-10-16T12:14:34.1271233Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_Communication.xml
2023-10-16T12:14:34.1771283Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_DataControl.xml
2023-10-16T12:14:34.2231229Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_DeviceControl.xml
2023-10-16T12:14:34.2721253Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_Driver.xml
2023-10-16T12:14:34.3471312Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_ExtensionPoints.xml
2023-10-16T12:14:34.4361302Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_Legacy.xml
2023-10-16T12:14:34.5061281Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_Monitoring.xml
2023-10-16T12:14:34.5851301Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_NetworkPerimeter.xml
2023-10-16T12:14:34.6631317Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_ThreatProtection.xml
2023-10-16T12:14:34.7081343Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_Updating.xml
2023-10-16T12:14:34.7551325Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_UserInterface.xml
2023-10-16T12:14:34.8181380Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Policy_WebControl.xml
2023-10-16T12:14:34.8811380Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/State_SharedState.xml
2023-10-16T12:14:34.9501342Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_AGENT.xml
2023-10-16T12:14:35.0171340Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_APPSPROXY.xml
2023-10-16T12:14:35.0561410Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_FIM.xml
2023-10-16T12:14:35.1191414Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_HBT.xml
2023-10-16T12:14:35.1881379Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_HOME.xml
2023-10-16T12:14:35.2861431Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_LiveQuery.xml
2023-10-16T12:14:35.3632577Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_MCS.xml
2023-10-16T12:14:35.4261429Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_NTP.xml
2023-10-16T12:14:35.5281481Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_SAV.xml
2023-10-16T12:14:35.5811510Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_SWC.xml
2023-10-16T12:14:35.6279297Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_UC.xml
2023-10-16T12:14:35.6731467Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_UI.xml
2023-10-16T12:14:35.7341448Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos/Management Communications System/Endpoint/Rules/Status_ZTNA.xml
2023-10-16T12:14:35.8181459Z INFO : Extracting package CRTSETUP_0.1.25.d8119030fa.zip
2023-10-16T12:14:35.8181459Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\manifest.dat
2023-10-16T12:14:35.8581467Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\crt\\setup.dll
2023-10-16T12:14:36.0611592Z INFO : Extracting package UNINSTALLER64_1.16.676.30faef2d8f.zip
2023-10-16T12:14:36.0611592Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\uninstaller64\\Setup64.dll
2023-10-16T12:14:36.2311938Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\uninstaller64\\SophosUninstall.exe
2023-10-16T12:14:36.4481616Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\uninstaller64\\deleter.dll
2023-10-16T12:14:36.5901564Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\uninstaller64\\integrity.dat
2023-10-16T12:14:36.6731630Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\uninstaller64\\manifest.dat
2023-10-16T12:14:36.9211592Z INFO : Extracting package SAUXG_6.15.1417.b642dbb93c.zip
2023-10-16T12:14:36.9211592Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\AUAdapter.dll
2023-10-16T12:14:37.1101719Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\AUTelem.exe
2023-10-16T12:14:37.3011656Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\GatherTelem.exe
2023-10-16T12:14:37.4491759Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\SAUcli.exe
2023-10-16T12:14:37.6116361Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\SophosAutoUpdateUninstall.exe
2023-10-16T12:14:37.8011762Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\SophosLaunchUpdate.exe
2023-10-16T12:14:37.9831755Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\SophosUpdate.exe
2023-10-16T12:14:38.2891754Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\SubmitTelem.exe
2023-10-16T12:14:38.4451794Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\iconn.cfg
2023-10-16T12:14:38.4861797Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\integrity.dat
2023-10-16T12:14:38.5541833Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\license_agreements.txt
2023-10-16T12:14:38.6114178Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\manifest.dat
2023-10-16T12:14:38.6711830Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\rootca.crl
2023-10-16T12:14:38.7261872Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\rootca.crt
2023-10-16T12:14:38.7929970Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\rootca384.crl
2023-10-16T12:14:38.8441909Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\rootca384.crt
2023-10-16T12:14:38.8902159Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\setup64.dll
2023-10-16T12:14:39.0772722Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\su-repair.exe
2023-10-16T12:14:39.4281949Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\su-setup32.exe
2023-10-16T12:14:39.5694956Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sau\\su-setup64.exe
2023-10-16T12:14:40.4582032Z INFO : Extracting package SED64_3.1.3.2282.afd18a142c.zip
2023-10-16T12:14:40.4592002Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\CoreCustomerAdapter.dll
2023-10-16T12:14:40.8592047Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\CoreEndpointAdapter.dll
2023-10-16T12:14:41.2372096Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\integrity.dat
2023-10-16T12:14:41.4275221Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\integrity_sel.dat
2023-10-16T12:14:41.5992194Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\manifest.dat
2023-10-16T12:14:41.7102183Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\NOTICE.txt
2023-10-16T12:14:41.8612257Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\public.pem
2023-10-16T12:14:42.2803841Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\safestore64.dll
2023-10-16T12:14:42.9679332Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SecurityProductInformation.ini
2023-10-16T12:14:43.1192915Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SEDcli.exe
2023-10-16T12:14:43.6859381Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SEDService.exe
2023-10-16T12:14:44.2282310Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SEDTelemetry.exe
2023-10-16T12:14:44.3796140Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SEDuninstall.exe
2023-10-16T12:14:44.6309508Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Setup.dll
2023-10-16T12:14:44.8579619Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosArchiver.exe
2023-10-16T12:14:45.3009636Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosCleanup.exe
2023-10-16T12:14:45.5519669Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosED.cat
2023-10-16T12:14:45.6569687Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosED.inf
2023-10-16T12:14:45.8819741Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosED.man
2023-10-16T12:14:46.1013151Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosED.sys
2023-10-16T12:14:46.3589846Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosEL.cat
2023-10-16T12:14:46.4049787Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosEL.inf
2023-10-16T12:14:46.4959836Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosEL.sys
2023-10-16T12:14:46.5779953Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosFileSubmitter.exe
2023-10-16T12:14:46.9149860Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosIntelixPackager.exe
2023-10-16T12:14:47.1568063Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosInterceptXCLI.exe
2023-10-16T12:14:47.3919978Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosNA.exe
2023-10-16T12:14:47.4609987Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosRestore.exe
2023-10-16T12:14:47.8810027Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosSafestore.exe
2023-10-16T12:14:48.3910091Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SophosScanCoordinator.exe
2023-10-16T12:14:48.6030067Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\sophtlib.dll
2023-10-16T12:14:48.9970189Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SSPDevCon.exe
2023-10-16T12:14:49.1800148Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SspEdr.exe
2023-10-16T12:14:49.2690229Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SSPService.exe
2023-10-16T12:14:50.4470316Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\SSPTelemetry.exe
2023-10-16T12:14:50.5580332Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/DevCntrl.conf
2023-10-16T12:14:50.6350356Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/SXA.conf
2023-10-16T12:14:50.6920445Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/amsi.dec
2023-10-16T12:14:50.7764291Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/amsi_uac.dec
2023-10-16T12:14:50.8620338Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/devicecontrol.dec
2023-10-16T12:14:50.9860335Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/dlp.dec
2023-10-16T12:14:51.0810347Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/hmpa.dec
2023-10-16T12:14:51.1650444Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/ips.dec
2023-10-16T12:14:51.2260425Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/main.dec
2023-10-16T12:14:51.3220378Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/static.dec
2023-10-16T12:14:51.3860455Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/BehavioralRules/web.dec
2023-10-16T12:14:51.4850407Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/Rules/RCA-binary-load.dat
2023-10-16T12:14:51.5260397Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\Config/Rules/rules.bin
2023-10-16T12:14:51.6860485Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\x64/SophosED.dll
2023-10-16T12:14:51.9330439Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sed64\\x86/SophosED.dll
2023-10-16T12:14:52.3440496Z INFO : Extracting package SSE64_3.88.0.81.84dde49a36.zip
2023-10-16T12:14:52.3450502Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\Setup64.dll
2023-10-16T12:14:52.5700525Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\SophosSAVICLI.exe
2023-10-16T12:14:53.0780547Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\SophosSSEUninstall.exe
2023-10-16T12:14:53.2730571Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\SophosSSEValidator.exe
2023-10-16T12:14:53.4401861Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\conan.dll
2023-10-16T12:14:53.6530668Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\integrity.dat
2023-10-16T12:14:53.7530611Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\manifest.dat
2023-10-16T12:14:53.8250639Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\osdp.dll
2023-10-16T12:14:53.9135829Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\savi.dll
2023-10-16T12:14:55.5260761Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\savmscm.dll
2023-10-16T12:14:55.6580794Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\sophtlib.dll
2023-10-16T12:14:56.1200880Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\sse64\\veex.dll
2023-10-16T12:14:56.1970817Z INFO : Extracting package HMPAPOLICY_3.9.1.2325.f91d748b7e.zip
2023-10-16T12:14:56.1970817Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\hmpa_policy_rules_manifest.dat
2023-10-16T12:14:56.2670816Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos\\Management Communications System\\Endpoint\\Rules\\LocalPolicy_ExploitPrevention.xml
2023-10-16T12:14:56.3360818Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos\\Management Communications System\\Endpoint\\Rules\\Map_VirtualAdapters_ExploitPrevention.xml
2023-10-16T12:14:56.4170832Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos\\Management Communications System\\Endpoint\\Rules\\Policy_ExploitPrevention.xml
2023-10-16T12:14:56.4990856Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\mcsep\\Sophos\\Management Communications System\\Endpoint\\Rules\\Status_HMPA.xml
2023-10-16T12:14:56.8110950Z INFO : Extracting package HMPA64_3.9.1.2325.b5651bde00.zip
2023-10-16T12:14:56.8120880Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\Setup64.dll
2023-10-16T12:14:57.1440928Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\SophosHMPAUninstaller.exe
2023-10-16T12:14:57.3789410Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\SophosRestore.exe
2023-10-16T12:14:57.8560891Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\hmpalert.cat
2023-10-16T12:14:57.9110917Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\hmpalert.dll
2023-10-16T12:14:58.0960992Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\hmpalert.exe
2023-10-16T12:14:58.9400936Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\hmpalert.sys
2023-10-16T12:14:59.1080959Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\hmpalert_x86.dll
2023-10-16T12:14:59.2912366Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\integrity.dat
2023-10-16T12:14:59.3490963Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\manifest.dat
2023-10-16T12:14:59.4430816Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\readme.txt
2023-10-16T12:14:59.5074222Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\hmpa64\\scf.dat
2023-10-16T12:14:59.5700976Z INFO : Extracting package WindowsCloudServerAV_1.3.95.b6afda70a8.zip
2023-10-16T12:14:59.5700976Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\escdp.dat
2023-10-16T12:14:59.6261150Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\savxp/SAVCFG/savcfg.json
2023-10-16T12:14:59.7124877Z INFO : Decoding C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded\\savxp/SAVCFG/savcfg.manifest.dat
2023-10-16T12:14:59.9706775Z INFO : Saving state to C:\\ProgramData\\Sophos\\CloudInstaller\\state.xml (new file)
2023-10-16T12:15:00.0450983Z INFO : Updated model with component: SSE64
2023-10-16T12:15:00.0450983Z INFO : Updated model with component: SED64
2023-10-16T12:15:00.0450983Z INFO : Updated model with component: SAUXG
2023-10-16T12:15:00.0460989Z INFO : Updated model with component: UNINSTALLER64
2023-10-16T12:15:00.0460989Z INFO : Updated model with component: HMPA64
2023-10-16T12:15:00.0470983Z INFO : Updated model with component: CRTSETUP
2023-10-16T12:15:00.0470983Z INFO : Updated model with component: MCS
2023-10-16T12:15:00.0490993Z INFO : Updated model with component: SHS
2023-10-16T12:15:00.0490993Z INFO : Updated model with component: SFS64
2023-10-16T12:15:00.0490993Z INFO : Updated model with component: UI64
2023-10-16T12:15:00.0500998Z INFO : Updated model with component: AMSI64
2023-10-16T12:15:00.0500998Z INFO : Updated model with component: SME64
2023-10-16T12:15:00.0572030Z INFO : Updated model with component: ESH64
2023-10-16T12:15:00.0572030Z INFO : Updated model with component: EFW64
2023-10-16T12:15:00.0610962Z INFO : Updated model with component: FIM
2023-10-16T12:15:00.0610962Z INFO : Updated model with component: NTP64
2023-10-16T12:15:00.0610962Z INFO : Updated model with component: SDU64
2023-10-16T12:15:00.0620995Z INFO : Command 'Download' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0620995Z INFO : About to execute command: UninstallSophosClean
2023-10-16T12:15:00.0620995Z INFO : Sophos Clean does not need uninstalling.
2023-10-16T12:15:00.0631005Z INFO : Command 'UninstallSophosClean' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0631005Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0640997Z INFO : Sophos AutoUpdate is not installed.
2023-10-16T12:15:00.0640997Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0640997Z INFO : About to execute command: InstallIncompleteCommand
2023-10-16T12:15:00.0651005Z INFO : Successfully set registry values.
2023-10-16T12:15:00.0651005Z INFO : Command 'InstallIncompleteCommand' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0661004Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0661004Z INFO : Sophos Remote Management System is not installed.
2023-10-16T12:15:00.0661004Z INFO : Any CMT migration communications are no longer active.
2023-10-16T12:15:00.0671004Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0671004Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0671004Z INFO : Sophos System Protection is not installed.
2023-10-16T12:15:00.0681005Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0681005Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0690998Z INFO : Sophos Heartbeat is not installed.
2023-10-16T12:15:00.0690998Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0700983Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0770992Z INFO : Sophos Network Access Control is not installed.
2023-10-16T12:15:00.0770992Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0780998Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0780998Z INFO : Sophos Client Firewall is not installed.
2023-10-16T12:15:00.0780998Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0790990Z INFO : About to execute command: Uninstall
2023-10-16T12:15:00.0891038Z INFO : Sophos Patch is not installed.
2023-10-16T12:15:00.0896366Z INFO : Command 'Uninstall' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0896366Z INFO : About to execute command: UninstallSophosClean
2023-10-16T12:15:00.0901003Z INFO : Sophos Clean does not need uninstalling.
2023-10-16T12:15:00.0901003Z INFO : Command 'UninstallSophosClean' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0910993Z INFO : About to execute command: UninstallOrphanedProducts
2023-10-16T12:15:00.0921000Z INFO : Component is not orphaned; won't be uninstalled: SSE64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: SED64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: SAUXG
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: UNINSTALLER64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: HMPA64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: CRTSETUP
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: MCS
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: SHS
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: SFS64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: UI64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: AMSI64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: SME64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: ESH64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: EFW64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: FIM
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: NTP64
2023-10-16T12:15:00.0931006Z INFO : Component is not orphaned; won't be uninstalled: SDU64
2023-10-16T12:15:00.0931006Z INFO : Command 'UninstallOrphanedProducts' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:00.0991600Z INFO : About to execute command: PrepareInstallation
2023-10-16T12:15:00.0993594Z INFO : Remove any existing target folders in case this is a re-install
2023-10-16T12:15:00.1000996Z INFO : Attempting to remove 'C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded'.
2023-10-16T12:15:00.1000996Z INFO : Attempting to remove 'C:\\ProgramData\\Sophos\\AutoUpdate\\data\\Repo'.
2023-10-16T12:15:00.1010996Z INFO : Attempting to remove 'C:\\ProgramData\\Sophos\\AutoUpdate\\data\\Warehouse'.
2023-10-16T12:15:00.1010996Z INFO : Create target parent folders in case this is a fresh install
2023-10-16T12:15:00.1221387Z INFO : Move installer's decoded and raw files to seed SAU
2023-10-16T12:15:00.1221387Z INFO : Attempting to rename 'C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded' to 'C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded'.
2023-10-16T12:15:00.1251002Z INFO : Attempting to rename 'C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\Repo' to 'C:\\ProgramData\\Sophos\\AutoUpdate\\data\\Repo'.
2023-10-16T12:15:00.1261039Z INFO : Ensuring any MCS services are stopped to allow settings to be persisted and to force statuses to be resent after clearing cache
2023-10-16T12:15:00.1270993Z INFO : No cached RMS computer description override key
2023-10-16T12:15:00.1296632Z INFO : No RMS computer description override key
2023-10-16T12:15:00.1301003Z INFO : Clearing MCS adapter storage files from: C:\\ProgramData\\Sophos\\Remote Management System\\3\\Agent\\AdapterStorage\\MCS
2023-10-16T12:15:00.1301003Z INFO : Clearing : C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\Config\\MessageRelayConfig.xml
2023-10-16T12:15:00.1301003Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2023-10-16T12:15:01.1952670Z INFO : Retrieved customer id: e5ebf71a-96e0-344b-ea22-f47e9522a216
2023-10-16T12:15:01.2221274Z INFO : Persisting endpoint flags
2023-10-16T12:15:01.2221274Z INFO : Central flags: '{"amsi.available": "true", "amsi.block-and-clean.enabled": "true", "amsi.fastregex.available": "true", "amsi.pseudohandle.enabled": "true", "behavioral-blocking.available": "true", "behavioral-silent.available": "true", "behavioral.bms.enabled": "true", "boot.modernweb.available": "true", "boot.modernweb.block_by_scan": "true", "boot.modernweb.block_by_url": "true", "boot.modernweb.can_decrypt": "true", "boot.sed.runtimeiocsjournal.available": "true", "boot.ssp-clean.available": "true", "boot.ssp.lua.coroutines.enabled": "true", "boot.ssp.service-launches-scan-coordinator.available": "true", "boot.sting20.c2c3detections.enabled": "true", "boot.sting20.datalossprevention.enabled": "true", "boot.sting20.devicecontrol.enabled": "true", "boot.sting20.downloadrepscanning.enabled": "true", "boot.sting20.ondemandscanning.enabled": "true", "boot.sting20.pejitscanning.enabled": "true", "boot.sting20.realtimescanning.enabled": "true", "boot.sting20.sscm.enabled": "true", "boot.sting20.webcontrol.enabled": "true", "boot.sting20.webprotection.enabled": "true", "health.threat-services.enabled": "true", "hmpa.amsiguard.enforce": "true", "hmpa.amsiguard.silent": "true", "hmpa.apcmitigation.v2.enforce": "true", "hmpa.apcmitigation.v2.silent": "true", "hmpa.apisetguard.enforce": "true", "hmpa.apisetguard.silent": "true", "hmpa.c2interceptor.enforce": "true", "hmpa.c2interceptor.silent": "true", "hmpa.can-terminate-system-process.available": "true", "hmpa.cg5-backwards-link.available": "true", "hmpa.cg5-base64.available": "true", "hmpa.ciguard.enforce": "true", "hmpa.ciguard.silent": "true", "hmpa.cookieguard.enforce": "true", "hmpa.cookieguard.silent": "true", "hmpa.credguard.v2.silent": "true", "hmpa.credguard.v3.silent": "true", "hmpa.credguardsamreg.enforce": "true", "hmpa.credguardsamreg.silent": "true", "hmpa.cryptoguard.v5.enforce": "true", "hmpa.cryptoguardefs.enforce": "true", "hmpa.cryptoguardefs.silent": "true", "hmpa.ctfguard.enforce": "true", "hmpa.ctfguard.silent": "true", "hmpa.ex-mem-hook.available": "true", "hmpa.heapheaphooray.enforce": "true", "hmpa.heapheaphooray.silent": "true", "hmpa.heapheaphooray.v2.enforce": "true", "hmpa.heapheaphooray.v2.silent": "true", "hmpa.heapheaphooray.v3.enforce": "true", "hmpa.heapheaphooray.v3.silent": "true", "hmpa.hollowprocessguard.v3.enforce": "true", "hmpa.hollowprocessguard.v3.silent": "true", "hmpa.lockdownautorun.v3.enforce": "true", "hmpa.lockdownautorun.v3.silent": "true", "hmpa.lockdownautorun.v5.enforce": "true", "hmpa.lockdownautorun.v5.silent": "true", "hmpa.lockdownmemory.v2.enforce": "true", "hmpa.lockdownmemory.v2.silent": "true", "hmpa.stackexec.v2.enforce": "true", "hmpa.stackexec.v2.silent": "true", "hmpa.stackpivot.silent": "true", "hmpa.stickyguard.v2.enforce": "true", "hmpa.stickyguard.v2.silent": "true", "jwt-token.available": "true", "livequery.network-tables.available": "true", "mcs.push.available": "true", "mcs.v2.data_feed.available": "true", "mcs.v2.push.available": "true", "mcs.v2.responses.available": "true", "mlwindowsdir.available": "true", "modernweb.intelixupload.enabled": "true", "modernweb.offloading.enabled": "true", "pinnedglobalreplocal.available": "true", "pinnedglobalrepnetwork.available": "true", "repair.available": "true", "sav.hips.disabled": "true", "sdds3.ready": "true", "sed.dynamic-msthreatintel2.enabled": "true", "sed.dynamic-mswinsecaudit.enabled": "true", "sed.multithreaded-hashing.enabled": "true", "sed.no-hashing-of-excluded-files": "true", "sed.originalprocess-spid.enabled": "true", "sed.protect-restore.enabled": "true", "sed.pseudohandle-events.enabled": "true", "sed.stricter-sophos-event-filtering.enabled": "true", "sed.tp2020-denyfilelocks-win10.available": "true", "sed.tp2020-denyfilelocks-win7-win8.available": "true", "sed.tp2020-forcefilesharing-win10.available": "true", "sed.tp2020-forcefilesharing-win7-win8.available": "true", "sed.tp2020-oplocks-win10.available": "true", "sed.tp2020-process-win10.available": "true", "sed.tp2020-process-win7.available": "true", "sed.tp2020-process-win8.available": "true", "sed.tp2021-log-win10.available": "true", "sed.tp2021-log-win7-win8.available": "true", "sed.tp2022-cot.available": "true", "sed.tp2022-deny-extra-lsass-win10x64.available": "true", "sed.tp2022-deny-lsaiso-win10x64.available": "true", "sed.tpsafeboot.available": "true", "sed.use-one-oplock-handle.enabled": "true", "sedupdating.ready": "true", "ssp-clean.enabled": "true", "ssp.appc.reporting.available": "true", "ssp.clear-historian-db-file.enabled": "true", "ssp.inner-file-telemetry.enabled": "true", "ssp.inner-vdl-telemetry.enabled": "true", "ssp.instant-core-clean-items.available": "true", "ssp.lua.jit.enabled": "true", "ssp.multiplefilesubmission.available": "true", "ssp.non-pe-telemetry.enabled": "true", "ssp.opportunistic_sxl4_batching.enabled": "true", "ssp.static.postanalysis.available": "true", "ssp.submitfilemetadata.available": "true", "ssp.sxl4.extended.enabled": "true", "ssp.sxl4.latency_check.enabled": "true", "ssp.verify-behave-signature.enabled": "true", "sting20-pe.enabled": "true", "su-setup.available": "true", "vdldetections.available": "true", "xdr.enabled": "true"}'
2023-10-16T12:15:01.2341079Z INFO : Loaded 85 endpoint flags
2023-10-16T12:15:01.2351012Z INFO : Warehouse flags from file 'cepngsrv.json': '{"amsi.available": "always-after-reboot", "amsi.block-and-clean.enabled": "always-after-reboot", "amsi.fastregex.available": "always", "amsi.pseudohandle.enabled": "always-after-reboot", "behavioral-blocking.available": "always-after-reboot", "behavioral-silent.available": "always", "behavioral.bms.enabled": "always", "boot.modernweb.available": "always", "boot.modernweb.block_by_scan": "always", "boot.modernweb.block_by_url": "always", "boot.modernweb.can_decrypt": "always", "boot.sed.runtimeiocsjournal.available": "always", "boot.ssp-clean.available": "always", "boot.ssp.lua.coroutines.enabled": "true", "boot.ssp.service-launches-scan-coordinator.available": "true", "boot.sting20.c2c3detections.enabled": "always", "boot.sting20.datalossprevention.enabled": "always", "boot.sting20.devicecontrol.enabled": "always", "boot.sting20.downloadrepscanning.enabled": "always", "boot.sting20.ondemandscanning.enabled": "always", "boot.sting20.pejitscanning.enabled": "always", "boot.sting20.realtimescanning.enabled": "always", "boot.sting20.sscm.enabled": "always", "boot.sting20.webcontrol.enabled": "always", "boot.sting20.webprotection.enabled": "always", "dns-sniffing.enabled": "true", "ips.available": "false", "ips.available_win7": "false", "ips.filter.inbound": "false", "ips.filter.outbound": "false", "livequery.network-tables.available": "always", "mcs.v2.push.available": "true", "mcs.v2.responses.available": "always", "modernweb.intelixupload.enabled": "false", "modernweb.offloading.enabled": "true", "repair.available": "true-after-reboot", "sav.hips.disabled": "always-after-reboot", "sdds3.ready": "always-after-reboot", "sed.async-queue-large.enabled": "true-after-reboot", "sed.dynamic-msthreatintel.enabled": "true-after-reboot", "sed.dynamic-msthreatintel2.enabled": "always-after-reboot", "sed.dynamic-mswinsecaudit.enabled": "always-after-reboot", "sed.msthreatintel-journal-events.enabled": "true-after-reboot", "sed.multithreaded-hashing.enabled": "always-after-reboot", "sed.no-hashing-of-excluded-files": "always-after-reboot", "sed.originalprocess-spid.enabled": "true-after-reboot", "sed.protect-restore.enabled": "always-after-reboot", "sed.pseudohandle-events.enabled": "always-after-reboot", "sed.stricter-sophos-event-filtering.enabled": "true-after-reboot", "sed.tp2020-denyfilelocks-win10.available": "always-after-reboot", "sed.tp2020-denyfilelocks-win7-win8.available": "always-after-reboot", "sed.tp2020-forcefilesharing-win10.available": "always-after-reboot", "sed.tp2020-forcefilesharing-win7-win8.available": "always-after-reboot", "sed.tp2020-oplocks-win10.available": "always-after-reboot", "sed.tp2020-oplocks-win7-win8.available": "false", "sed.tp2020-process-win10.available": "always-after-reboot", "sed.tp2020-process-win7.available": "always-after-reboot", "sed.tp2020-process-win8.available": "always-after-reboot", "sed.tp2021-log-win10.available": "always-after-reboot", "sed.tp2021-log-win7-win8.available": "always-after-reboot", "sed.tp2022-cot.available": "true-after-reboot", "sed.tp2022-deny-extra-lsass-win10x64.available": "always-after-reboot", "sed.tp2022-deny-lsaiso-win10x64.available": "always-after-reboot", "sed.tpsafeboot.available": "always-after-reboot", "sed.use-one-oplock-handle.enabled": "true-after-reboot", "sedupdating.ready": "true-after-reboot", "sfs.appcontainer.available": "false", "ssp-clean.enabled": "always-after-reboot", "ssp.appc.reporting.available": "always-after-reboot", "ssp.clear-historian-db-file.enabled": "always-after-reboot", "ssp.inner-file-telemetry.enabled": "true-after-reboot", "ssp.inner-vdl-telemetry.enabled": "true-after-reboot", "ssp.instant-core-clean-items.available": "always", "ssp.lua.jit.enabled": "always-after-reboot", "ssp.multiplefilesubmission.available": "always-after-reboot", "ssp.non-pe-telemetry.enabled": "true-after-reboot", "ssp.opportunistic_sxl4_batching.enabled": "true-after-reboot", "ssp.static.postanalysis.available": "always", "ssp.submitfilemetadata.available": "always-after-reboot", "ssp.sxl4.extended.enabled": "always-after-reboot", "ssp.sxl4.latency_check.enabled": "always-after-reboot", "ssp.sxl4.lookup-url-from-policy.available": "true-after-reboot", "ssp.verify-behave-signature.enabled": "true-after-reboot", "sting20-pe.enabled": "always-after-reboot", "xdr.enabled": "always-after-reboot"}'
2023-10-16T12:15:01.2531012Z INFO : Loaded 57 endpoint flags
2023-10-16T12:15:01.2531012Z INFO : Warehouse flags from file 'cixsrv.json': '{"hmpa.apcmitigation.v2.enforce": "true-after-reboot", "hmpa.apcmitigation.v2.silent": "true-after-reboot", "hmpa.apisetguard.enforce": "always-after-reboot", "hmpa.apisetguard.silent": "always-after-reboot", "hmpa.branchtracing.enforce": "false", "hmpa.branchtracing.silent": "false", "hmpa.c2interceptor.enforce": "true-after-reboot", "hmpa.c2interceptor.silent": "true-after-reboot", "hmpa.cg5-backwards-link.available": "always-after-reboot", "hmpa.cg5-base64.available": "always-after-reboot", "hmpa.ciguard.enforce": "true-after-reboot", "hmpa.ciguard.silent": "true-after-reboot", "hmpa.codecave.v2.silent": "true-after-reboot", "hmpa.cookieguard.enforce": "false", "hmpa.cookieguard.silent": "always-after-reboot", "hmpa.cookieguard.v2.enforce": "false", "hmpa.cookieguard.v2.silent": "false", "hmpa.credguard.v2.enforce": "false", "hmpa.credguard.v2.silent": "always-after-reboot", "hmpa.credguard.v3.silent": "always-after-reboot", "hmpa.cryptoguard.v5.enforce": "always-after-reboot", "hmpa.cryptoguardsinglefile.silent": "true-after-reboot", "hmpa.ex-mem-hook.available": "always-after-reboot", "hmpa.gamedetection.enforce": "false", "hmpa.heapheaphooray.v3.enforce": "always-after-reboot", "hmpa.heapheaphooray.v3.silent": "always-after-reboot", "hmpa.hollowprocessguard.v2.enforce": "false", "hmpa.hollowprocessguard.v2.silent": "false", "hmpa.hollowprocessguard.v3.enforce": "true-after-reboot", "hmpa.hollowprocessguard.v3.silent": "true-after-reboot", "hmpa.ignore-attested.available": "false", "hmpa.lockdownautorun.v3.enforce": "always-after-reboot", "hmpa.lockdownautorun.v3.silent": "always-after-reboot", "hmpa.lockdownautorun.v4.enforce": "true-after-reboot", "hmpa.lockdownautorun.v4.silent": "true-after-reboot", "hmpa.lockdownautorun.v5.enforce": "true-after-reboot", "hmpa.lockdownautorun.v5.silent": "true-after-reboot", "hmpa.lockdownloadimage.enforce": "false", "hmpa.lockdownloadimage.silent": "false", "hmpa.lockdownmemory.v2.enforce": "always-after-reboot", "hmpa.lockdownmemory.v2.silent": "always-after-reboot", "hmpa.privguard.v2.enforce": "true-after-reboot", "hmpa.privguard.v2.silent": "true-after-reboot", "hmpa.stackexec.v2.enforce": "always-after-reboot", "hmpa.stackexec.v2.silent": "always-after-reboot", "hmpa.stackpivot.enforce": "false", "hmpa.stackpivot.silent": "true-after-reboot", "hmpa.stickyguard.v2.enforce": "true-after-reboot", "hmpa.stickyguard.v2.silent": "true-after-reboot", "hmpa.syscallx64.enforce": "true-after-reboot", "hmpa.syscallx64.silent": "true-after-reboot", "hmpa.syscallx64.v2.enforce": "true-after-reboot", "hmpa.syscallx64.v2.silent": "true-after-reboot", "hmpa.syscallx86-global.available": "true-after-reboot", "hmpa.syscallx86.v2.enforce": "true-after-reboot", "hmpa.syscallx86.v2.silent": "true-after-reboot", "hmpa.wipeguard-nvme-and-gpt.available": "true-after-reboot"}'
2023-10-16T12:15:01.2541015Z INFO : Merged flags: '{"amsi.available": "always", "amsi.block-and-clean.enabled": "always", "amsi.fastregex.available": "always", "amsi.pseudohandle.enabled": "always", "behavioral-blocking.available": "always", "behavioral-silent.available": "always", "behavioral.bms.enabled": "always", "boot.modernweb.available": "always", "boot.modernweb.block_by_scan": "always", "boot.modernweb.block_by_url": "always", "boot.modernweb.can_decrypt": "always", "boot.sed.runtimeiocsjournal.available": "always", "boot.ssp-clean.available": "always", "boot.ssp.lua.coroutines.enabled": "true", "boot.ssp.service-launches-scan-coordinator.available": "true", "boot.sting20.c2c3detections.enabled": "always", "boot.sting20.datalossprevention.enabled": "always", "boot.sting20.devicecontrol.enabled": "always", "boot.sting20.downloadrepscanning.enabled": "always", "boot.sting20.ondemandscanning.enabled": "always", "boot.sting20.pejitscanning.enabled": "always", "boot.sting20.realtimescanning.enabled": "always", "boot.sting20.sscm.enabled": "always", "boot.sting20.webcontrol.enabled": "always", "boot.sting20.webprotection.enabled": "always", "dns-sniffing.enabled": "false", "hmpa.apcmitigation.v2.enforce": "true", "hmpa.apcmitigation.v2.silent": "true", "hmpa.apisetguard.enforce": "always", "hmpa.apisetguard.silent": "always", "hmpa.branchtracing.enforce": "false", "hmpa.branchtracing.silent": "false", "hmpa.c2interceptor.enforce": "true", "hmpa.c2interceptor.silent": "true", "hmpa.cg5-backwards-link.available": "always", "hmpa.cg5-base64.available": "always", "hmpa.ciguard.enforce": "true", "hmpa.ciguard.silent": "true", "hmpa.codecave.v2.silent": "false", "hmpa.cookieguard.enforce": "false", "hmpa.cookieguard.silent": "always", "hmpa.cookieguard.v2.enforce": "false", "hmpa.cookieguard.v2.silent": "false", "hmpa.credguard.v2.enforce": "false", "hmpa.credguard.v2.silent": "always", "hmpa.credguard.v3.silent": "always", "hmpa.cryptoguard.v5.enforce": "always", "hmpa.cryptoguardsinglefile.silent": "false", "hmpa.ex-mem-hook.available": "always", "hmpa.gamedetection.enforce": "false", "hmpa.heapheaphooray.v3.enforce": "always", "hmpa.heapheaphooray.v3.silent": "always", "hmpa.hollowprocessguard.v2.enforce": "false", "hmpa.hollowprocessguard.v2.silent": "false", "hmpa.hollowprocessguard.v3.enforce": "true", "hmpa.hollowprocessguard.v3.silent": "true", "hmpa.ignore-attested.available": "false", "hmpa.lockdownautorun.v3.enforce": "always", "hmpa.lockdownautorun.v3.silent": "always", "hmpa.lockdownautorun.v4.enforce": "false", "hmpa.lockdownautorun.v4.silent": "false", "hmpa.lockdownautorun.v5.enforce": "true", "hmpa.lockdownautorun.v5.silent": "true", "hmpa.lockdownloadimage.enforce": "false", "hmpa.lockdownloadimage.silent": "false", "hmpa.lockdownmemory.v2.enforce": "always", "hmpa.lockdownmemory.v2.silent": "always", "hmpa.privguard.v2.enforce": "false", "hmpa.privguard.v2.silent": "false", "hmpa.stackexec.v2.enforce": "always", "hmpa.stackexec.v2.silent": "always", "hmpa.stackpivot.enforce": "false", "hmpa.stackpivot.silent": "true", "hmpa.stickyguard.v2.enforce": "true", "hmpa.stickyguard.v2.silent": "true", "hmpa.syscallx64.enforce": "false", "hmpa.syscallx64.silent": "false", "hmpa.syscallx64.v2.enforce": "false", "hmpa.syscallx64.v2.silent": "false", "hmpa.syscallx86-global.available": "false", "hmpa.syscallx86.v2.enforce": "false", "hmpa.syscallx86.v2.silent": "false", "hmpa.wipeguard-nvme-and-gpt.available": "false", "ips.available": "false", "ips.available_win7": "false", "ips.filter.inbound": "false", "ips.filter.outbound": "false", "livequery.network-tables.available": "always", "mcs.v2.push.available": "true", "mcs.v2.responses.available": "always", "modernweb.intelixupload.enabled": "false", "modernweb.offloading.enabled": "true", "repair.available": "true", "sav.hips.disabled": "always", "sdds3.ready": "always", "sed.async-queue-large.enabled": "false", "sed.dynamic-msthreatintel.enabled": "false", "sed.dynamic-msthreatintel2.enabled": "always", "sed.dynamic-mswinsecaudit.enabled": "always", "sed.msthreatintel-journal-events.enabled": "false", "sed.multithreaded-hashing.enabled": "always", "sed.no-hashing-of-excluded-files": "always", "sed.originalprocess-spid.enabled": "true", "sed.protect-restore.enabled": "always", "sed.pseudohandle-events.enabled": "always", "sed.stricter-sophos-event-filtering.enabled": "true", "sed.tp2020-denyfilelocks-win10.available": "always", "sed.tp2020-denyfilelocks-win7-win8.available": "always", "sed.tp2020-forcefilesharing-win10.available": "always", "sed.tp2020-forcefilesharing-win7-win8.available": "always", "sed.tp2020-oplocks-win10.available": "always", "sed.tp2020-oplocks-win7-win8.available": "false", "sed.tp2020-process-win10.available": "always", "sed.tp2020-process-win7.available": "always", "sed.tp2020-process-win8.available": "always", "sed.tp2021-log-win10.available": "always", "sed.tp2021-log-win7-win8.available": "always", "sed.tp2022-cot.available": "true", "sed.tp2022-deny-extra-lsass-win10x64.available": "always", "sed.tp2022-deny-lsaiso-win10x64.available": "always", "sed.tpsafeboot.available": "always", "sed.use-one-oplock-handle.enabled": "true", "sedupdating.ready": "true", "sfs.appcontainer.available": "false", "ssp-clean.enabled": "always", "ssp.appc.reporting.available": "always", "ssp.clear-historian-db-file.enabled": "always", "ssp.inner-file-telemetry.enabled": "true", "ssp.inner-vdl-telemetry.enabled": "true", "ssp.instant-core-clean-items.available": "always", "ssp.lua.jit.enabled": "always", "ssp.multiplefilesubmission.available": "always", "ssp.non-pe-telemetry.enabled": "true", "ssp.opportunistic_sxl4_batching.enabled": "true", "ssp.static.postanalysis.available": "always", "ssp.submitfilemetadata.available": "always", "ssp.sxl4.extended.enabled": "always", "ssp.sxl4.latency_check.enabled": "always", "ssp.sxl4.lookup-url-from-policy.available": "false", "ssp.verify-behave-signature.enabled": "true", "sting20-pe.enabled": "always", "xdr.enabled": "always"}'
2023-10-16T12:15:01.2642005Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2023-10-16T12:15:01.2761014Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2023-10-16T12:15:01.2771026Z INFO : Clearing MCS status cache files from: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\Cache
2023-10-16T12:15:01.2781052Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2023-10-16T12:15:01.2791025Z INFO : Restarting any stopped services
2023-10-16T12:15:01.2801025Z INFO : Writing SAUPolicy file C:\\ProgramData\\Sophos\\Remote Management System\\3\\Agent\\AdapterStorage\\ALC\\SAUPolicy
2023-10-16T12:15:01.2921164Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:15:01.4011018Z INFO : Legacy installation - writing registry key to update via cloud
2023-10-16T12:15:01.4021036Z INFO : Command 'PrepareInstallation' completed with success with reboot code '0' and error message ''.
2023-10-16T12:15:01.4021036Z INFO : About to execute command: SetupPlugin
2023-10-16T12:15:01.4031029Z INFO : Using manifest certificate: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\ManifestCerts\\rootca.crt
2023-10-16T12:15:01.4061044Z INFO : Using manifest certificate: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\ManifestCerts\\rootca384.crt
2023-10-16T12:15:01.4171037Z INFO : Install sequence for components is: CRTSETUP UNINSTALLER64 SED64 MCS SSE64 SFS64 SHS UI64 AMSI64 SME64 ESH64 EFW64 FIM NTP64 SDU64 HMPA64 SAUXG
2023-10-16T12:15:01.4391070Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\crt\\manifest.dat
2023-10-16T12:15:01.6079252Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\crt\\crt\\manifest.dat
2023-10-16T12:15:07.9883299Z INFO : Installing Component: Sophos Third-party Security Software Removal Tool v0.1.25
2023-10-16T12:15:07.9893337Z INFO : setupDll='setup.dll'; setupExe='su-setup32.exe'.
2023-10-16T12:15:08.397Z [ 620: 6088] W SED sync comms not available. Exception: Failed to initialize sync comms
2023-10-16T12:15:08.492Z [ 620: 6088] I Successfully established interface IProductSetup2.
2023-10-16T12:15:12.719Z [ 620: 6088] I Reboot state: 0
2023-10-16T12:15:12.719Z [ 620: 6088] I Successfully installed product 2B5BCA43-F85C-4C43-8C6B-30E7A5794439 0.1.25.
2023-10-16T12:15:12.7928511Z INFO : Installed Sophos Third-party Security Software Removal Tool v0.1.25: 0 (reboot code: 0)
2023-10-16T12:15:12.7928511Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:15:12.7938510Z INFO : Writing state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:15:12.7968499Z INFO : Writing XML for the state of the components
2023-10-16T12:15:12.8174122Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:15:12.8181449Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:15:12.8188501Z INFO : Writing state SED64 to registry.
2023-10-16T12:15:12.8188501Z INFO : Writing state MCS to registry.
2023-10-16T12:15:12.8198536Z INFO : Writing state SSE64 to registry.
2023-10-16T12:15:12.8198536Z INFO : Writing state SFS64 to registry.
2023-10-16T12:15:12.8208567Z INFO : Writing state SHS to registry.
2023-10-16T12:15:12.8208567Z INFO : Writing state UI64 to registry.
2023-10-16T12:15:12.8218491Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:15:12.8272068Z INFO : Writing state SME64 to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state ESH64 to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state EFW64 to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state FIM to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state NTP64 to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state SDU64 to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:15:12.8318548Z INFO : Writing state SAUXG to registry.
2023-10-16T12:15:12.8318548Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:15:15.0700270Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\uninstaller64\\manifest.dat
2023-10-16T12:15:15.9879832Z INFO : Installing Component: Sophos Endpoint Uninstaller for Windows (64-bit) v1.16.676
2023-10-16T12:15:15.9879832Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:15:16.277Z [ 6988: 6148] W SED sync comms not available. Exception: Failed to initialize sync comms
2023-10-16T12:15:16.357Z [ 6988: 6148] I Successfully established interface IProductSetup2.
2023-10-16T12:15:16.465Z [ 6988: 6148] I Reboot state: 0
2023-10-16T12:15:16.465Z [ 6988: 6148] I Successfully installed product 243DECCD-8080-410D-A45F-77F2182715EE 1.16.676.
2023-10-16T12:15:16.5309571Z INFO : Installed Sophos Endpoint Uninstaller for Windows (64-bit) v1.16.676: 0 (reboot code: 0)
2023-10-16T12:15:16.5339591Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:15:16.5349584Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:15:16.5359569Z INFO : Writing XML for the state of the components
2023-10-16T12:15:16.5369571Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:15:16.5379571Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:15:16.5379571Z INFO : Writing state SED64 to registry.
2023-10-16T12:15:16.5459602Z INFO : Writing state MCS to registry.
2023-10-16T12:15:16.5459602Z INFO : Writing state SSE64 to registry.
2023-10-16T12:15:16.5459602Z INFO : Writing state SFS64 to registry.
2023-10-16T12:15:16.5469588Z INFO : Writing state SHS to registry.
2023-10-16T12:15:16.5479595Z INFO : Writing state UI64 to registry.
2023-10-16T12:15:16.5479595Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:15:16.5479595Z INFO : Writing state SME64 to registry.
2023-10-16T12:15:16.5519626Z INFO : Writing state ESH64 to registry.
2023-10-16T12:15:16.5529613Z INFO : Writing state EFW64 to registry.
2023-10-16T12:15:16.5529613Z INFO : Writing state FIM to registry.
2023-10-16T12:15:16.5539591Z INFO : Writing state NTP64 to registry.
2023-10-16T12:15:16.5539591Z INFO : Writing state SDU64 to registry.
2023-10-16T12:15:16.5549569Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:15:16.5549569Z INFO : Writing state SAUXG to registry.
2023-10-16T12:15:16.5559573Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:15:16.7049543Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sed64\\appfeed_manifest.dat
2023-10-16T12:15:16.7513053Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sed64\\manifest.dat
2023-10-16T12:15:23.2047093Z INFO : Installing Component: Sophos Endpoint Defense for Windows (64-bit) v3.1.3.2282
2023-10-16T12:15:23.2047093Z INFO : setupDll='setup.dll'; setupExe='su-setup32.exe'.
2023-10-16T12:15:23.388Z [ 2992: 7692] W SED sync comms not available. Exception: Failed to initialize sync comms
2023-10-16T12:15:23.498Z [ 2992: 7692] I Successfully established interface IProductSetup2.
2023-10-16T12:15:51.273Z [ 2992: 7692] I Reboot state: 0
2023-10-16T12:15:51.273Z [ 2992: 7692] I Successfully installed product 1129226C-32AB-4B72-85E1-A9CC8DFBC859 3.1.3.2282.
2023-10-16T12:15:51.2964714Z INFO : Installed Sophos Endpoint Defense for Windows (64-bit) v3.1.3.2282: 0 (reboot code: 0)
2023-10-16T12:15:51.2964714Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:15:51.2964714Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:15:51.2974704Z INFO : Writing XML for the state of the components
2023-10-16T12:15:51.2974704Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:15:51.3062950Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:15:51.3064686Z INFO : Writing state SED64 to registry.
2023-10-16T12:15:51.3064686Z INFO : Writing state MCS to registry.
2023-10-16T12:15:51.3074696Z INFO : Writing state SSE64 to registry.
2023-10-16T12:15:51.3074696Z INFO : Writing state SFS64 to registry.
2023-10-16T12:15:51.3084704Z INFO : Writing state SHS to registry.
2023-10-16T12:15:51.3084704Z INFO : Writing state UI64 to registry.
2023-10-16T12:15:51.3104712Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:15:51.3104712Z INFO : Writing state SME64 to registry.
2023-10-16T12:15:51.3156195Z INFO : Writing state ESH64 to registry.
2023-10-16T12:15:51.3156195Z INFO : Writing state EFW64 to registry.
2023-10-16T12:15:51.3164709Z INFO : Writing state FIM to registry.
2023-10-16T12:15:51.3164709Z INFO : Writing state NTP64 to registry.
2023-10-16T12:15:51.3174710Z INFO : Writing state SDU64 to registry.
2023-10-16T12:15:51.3174710Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:15:51.3174710Z INFO : Writing state SAUXG to registry.
2023-10-16T12:15:51.3184779Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:15:52.9855111Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\mcsep\\flags_cepngsrv_manifest.dat
2023-10-16T12:15:53.0205117Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\mcsep\\flags_cixsrv_manifest.dat
2023-10-16T12:15:53.0535179Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\mcsep\\hmpa_policy_rules_manifest.dat
2023-10-16T12:15:53.1495127Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\mcsep\\manifest.dat
2023-10-16T12:15:56.0805625Z INFO : Installing Component: Sophos Management Communications System for Windows v4.19.561
2023-10-16T12:15:56.0805625Z INFO : setupDll='setup.dll'; setupExe='su-setup32.exe'.
2023-10-16T12:15:56.639Z [ 6148: 6988] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\mcsep\Sophos\Management Communications System\Endpoint\integrity.dat'
2023-10-16T12:15:56.818Z [ 6148: 6988] I Successfully established interface IProductSetup2.
2023-10-16T12:16:01.334Z [ 6148: 6988] I Reboot state: 0
2023-10-16T12:16:01.334Z [ 6148: 6988] I Successfully installed product 3799FB3E-808A-4F7D-AC6A-0C74F931C386 4.19.561.
2023-10-16T12:16:01.3566033Z INFO : Installed Sophos Management Communications System for Windows v4.19.561: 0 (reboot code: 0)
2023-10-16T12:16:01.3576044Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:01.3576044Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:01.3586034Z INFO : Writing XML for the state of the components
2023-10-16T12:16:01.3596018Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:01.3606049Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:01.3616007Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:01.3616007Z INFO : Writing state MCS to registry.
2023-10-16T12:16:01.3625994Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:01.3723704Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:01.3727036Z INFO : Writing state SHS to registry.
2023-10-16T12:16:01.3727036Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:01.3736011Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:01.3746005Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:01.3746005Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:01.3755997Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:01.3755997Z INFO : Writing state FIM to registry.
2023-10-16T12:16:01.3765996Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:01.3765996Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:01.3775987Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:01.3775987Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:01.3833807Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:03.1582888Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sse64\\manifest.dat
2023-10-16T12:16:06.0288563Z INFO : Installing Component: Sophos Standalone Engine v3.88.0.81
2023-10-16T12:16:06.0288563Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:06.254Z [ 3200: 1476] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sse64\integrity.dat'
2023-10-16T12:16:06.408Z [ 3200: 1476] I Successfully established interface IProductSetup2.
2023-10-16T12:16:29.053Z [ 3200: 1476] I Reboot state: 0
2023-10-16T12:16:29.053Z [ 3200: 1476] I Successfully installed product 0253775E-970D-4876-959C-21B422420E5A 3.88.0.81.
2023-10-16T12:16:29.0719251Z INFO : Installed Sophos Standalone Engine v3.88.0.81: 0 (reboot code: 0)
2023-10-16T12:16:29.0729271Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:29.0729271Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:29.0739275Z INFO : Writing XML for the state of the components
2023-10-16T12:16:29.0769255Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:29.0779287Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:29.0789273Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:29.0789273Z INFO : Writing state MCS to registry.
2023-10-16T12:16:29.0799258Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:29.0809263Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:29.0899258Z INFO : Writing state SHS to registry.
2023-10-16T12:16:29.0919287Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:29.0931195Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:29.0949274Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:29.0959286Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:29.0969288Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:29.0969288Z INFO : Writing state FIM to registry.
2023-10-16T12:16:29.0979284Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:29.0979284Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:29.0979284Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:29.0979284Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:29.0979284Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:35.4703116Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sfs64\\manifest.dat
2023-10-16T12:16:36.0141815Z INFO : Installing Component: Sophos File Scanner v1.11.3.879
2023-10-16T12:16:36.0141815Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:36.087Z [ 8664: 8668] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sfs64\Sophos\Sophos File Scanner\integrity.dat'
2023-10-16T12:16:36.131Z [ 8664: 8668] I Successfully established interface IProductSetup2.
2023-10-16T12:16:37.780Z [ 8664: 8668] I Reboot state: 0
2023-10-16T12:16:37.780Z [ 8664: 8668] I Successfully installed product 591706A7-9603-4255-A65F-EA49BB11E8AC 1.11.3.879.
2023-10-16T12:16:37.7889772Z INFO : Installed Sophos File Scanner v1.11.3.879: 0 (reboot code: 0)
2023-10-16T12:16:37.7889772Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:37.7899779Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:37.7909789Z INFO : Writing XML for the state of the components
2023-10-16T12:16:37.7929781Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:37.7929781Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:37.7939780Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:37.7959801Z INFO : Writing state MCS to registry.
2023-10-16T12:16:37.7959801Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:37.7979786Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:37.7979786Z INFO : Writing state SHS to registry.
2023-10-16T12:16:37.7989793Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:37.7999799Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:37.7999799Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:37.8009786Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:37.8009786Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:37.8019808Z INFO : Writing state FIM to registry.
2023-10-16T12:16:37.8029814Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:37.8029814Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:37.8039782Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:37.8039782Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:37.8049839Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:37.9596094Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\shs\\manifest.dat
2023-10-16T12:16:38.7427196Z INFO : Installing Component: Sophos Health for Windows v2.12.883
2023-10-16T12:16:38.7427196Z INFO : setupDll='setup.dll'; setupExe='su-setup32.exe'.
2023-10-16T12:16:38.847Z [ 8852: 8856] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\shs\integrity.dat'
2023-10-16T12:16:38.942Z [ 8852: 8856] I Successfully established interface IProductSetup2.
2023-10-16T12:16:40.442Z [ 8852: 8856] I Reboot state: 0
2023-10-16T12:16:40.442Z [ 8852: 8856] I Successfully installed product 3CE954A1-0F41-4D9B-B2F0-58AA75334DFD 2.12.883.
2023-10-16T12:16:40.4519284Z INFO : Installed Sophos Health for Windows v2.12.883: 0 (reboot code: 0)
2023-10-16T12:16:40.4519284Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:40.4529309Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:40.4539314Z INFO : Writing XML for the state of the components
2023-10-16T12:16:40.4549295Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:40.4559304Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:40.4559304Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:40.4569295Z INFO : Writing state MCS to registry.
2023-10-16T12:16:40.4569295Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:40.4579329Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:40.4579329Z INFO : Writing state SHS to registry.
2023-10-16T12:16:40.4589301Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:40.4589301Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:40.4599298Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:40.4599298Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:40.4609325Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:40.4609325Z INFO : Writing state FIM to registry.
2023-10-16T12:16:40.4619298Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:40.4619298Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:40.4629338Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:40.4629338Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:40.4639323Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:40.5349401Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\ui64\\manifest.dat
2023-10-16T12:16:41.9651009Z INFO : Installing Component: Sophos UI v2.9.564
2023-10-16T12:16:41.9661173Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:42.044Z [ 9152: 9156] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui64\Sophos\Sophos UI\integrity.dat'
2023-10-16T12:16:42.095Z [ 9152: 9156] I Successfully established interface IProductSetup2.
2023-10-16T12:16:42.849Z [ 9152: 9156] I Reboot state: 0
2023-10-16T12:16:42.849Z [ 9152: 9156] I Successfully installed product 5CD1A7B6-812E-47A1-A986-3A6D5D5C19F5 2.9.564.
2023-10-16T12:16:42.8601941Z INFO : Installed Sophos UI v2.9.564: 0 (reboot code: 0)
2023-10-16T12:16:42.8611937Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:42.8621953Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:42.8661937Z INFO : Writing XML for the state of the components
2023-10-16T12:16:42.8671936Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:42.8681936Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:42.8701963Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:42.8701963Z INFO : Writing state MCS to registry.
2023-10-16T12:16:42.8711954Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:42.8721959Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:42.8731960Z INFO : Writing state SHS to registry.
2023-10-16T12:16:42.8741961Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:42.8751947Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:42.8751947Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:42.8761945Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:42.8771957Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:42.8771957Z INFO : Writing state FIM to registry.
2023-10-16T12:16:42.8781956Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:42.8781956Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:42.8791955Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:42.8801955Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:42.8801955Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:43.2562331Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\amsi64\\manifest.dat
2023-10-16T12:16:44.0684105Z INFO : Installing Component: Sophos AMSI Protection v1.9.2098
2023-10-16T12:16:44.0707522Z INFO : setupDll='setup.dll'; setupExe='su-setup32.exe'.
2023-10-16T12:16:44.221Z [ 5092: 5604] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\amsi64\Sophos\AMSI Protection\integrity.dat'
2023-10-16T12:16:44.318Z [ 5092: 5604] I Successfully established interface IProductSetup2.
2023-10-16T12:16:44.440Z [ 5092: 5604] I Reboot state: 0
2023-10-16T12:16:44.440Z [ 5092: 5604] I Successfully installed product 642A6FD9-A9D6-482D-BD8C-46661F241A0E 1.9.2098.
2023-10-16T12:16:44.4643523Z INFO : Installed Sophos AMSI Protection v1.9.2098: 0 (reboot code: 0)
2023-10-16T12:16:44.4643523Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:44.4653477Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:44.4663878Z INFO : Writing XML for the state of the components
2023-10-16T12:16:44.4683473Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:44.4703498Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:44.4713485Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:44.4723484Z INFO : Writing state MCS to registry.
2023-10-16T12:16:44.4733482Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:44.4743486Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:44.4753506Z INFO : Writing state SHS to registry.
2023-10-16T12:16:44.4763487Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:44.4763487Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:44.4773489Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:44.4783486Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:44.4793495Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:44.4793495Z INFO : Writing state FIM to registry.
2023-10-16T12:16:44.4803488Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:44.4803488Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:44.4823497Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:44.4823497Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:44.4833498Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:44.5903594Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sme64\\manifest.dat
2023-10-16T12:16:44.8933888Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sme64\\docmodel\\manifest.dat
2023-10-16T12:16:45.2754214Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sme64\\scan\\manifest.dat
2023-10-16T12:16:45.6994554Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sme64\\telemetry\\manifest.dat
2023-10-16T12:16:46.0334849Z INFO : Installing Component: Sophos ML Engine v1.8.25.1
2023-10-16T12:16:46.0344858Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:46.132Z [ 6512: 1672] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sme64\integrity.dat'
2023-10-16T12:16:46.190Z [ 6512: 1672] I Successfully established interface IProductSetup2.
2023-10-16T12:16:48.113Z [ 6512: 1672] I Reboot state: 0
2023-10-16T12:16:48.113Z [ 6512: 1672] I Successfully installed product 70FDD40E-986A-44E5-9620-2B894A06702A 1.8.25.1.
2023-10-16T12:16:48.1196453Z INFO : Installed Sophos ML Engine v1.8.25.1: 0 (reboot code: 0)
2023-10-16T12:16:48.1196453Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:48.1206448Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:48.1216453Z INFO : Writing XML for the state of the components
2023-10-16T12:16:48.1236495Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:48.1246453Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:48.1256471Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:48.1256471Z INFO : Writing state MCS to registry.
2023-10-16T12:16:48.1266453Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:48.1266453Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:48.1276451Z INFO : Writing state SHS to registry.
2023-10-16T12:16:48.1276451Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:48.1286453Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:48.1296477Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:48.1296477Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:48.1306491Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:48.1306491Z INFO : Writing state FIM to registry.
2023-10-16T12:16:48.1316486Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:48.1316486Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:48.1326484Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:48.1326484Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:48.1336473Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:48.2926585Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\esh64\\manifest.dat
2023-10-16T12:16:49.5187431Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\esh64\\rules-manifest.dat
2023-10-16T12:16:49.7927638Z INFO : Installing Component: Support Tool v3.4.530.0
2023-10-16T12:16:49.7927638Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:49.863Z [ 9172: 9164] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\esh64\Sophos\Endpoint Self Help\integrity.dat'
2023-10-16T12:16:49.919Z [ 9172: 9164] I Successfully established interface IProductSetup2.
2023-10-16T12:16:50.338Z [ 9172: 9164] I Reboot state: 0
2023-10-16T12:16:50.338Z [ 9172: 9164] I Successfully installed product 7F682906-6E49-481B-89C5-2DCA36720F4F 3.4.530.0.
2023-10-16T12:16:50.3507950Z INFO : Installed Support Tool v3.4.530.0: 0 (reboot code: 0)
2023-10-16T12:16:50.3517958Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:50.3517958Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:50.3527958Z INFO : Writing XML for the state of the components
2023-10-16T12:16:50.3537951Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:50.3547958Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:50.3547958Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:50.3557954Z INFO : Writing state MCS to registry.
2023-10-16T12:16:50.3567962Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:50.3577959Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:50.3577959Z INFO : Writing state SHS to registry.
2023-10-16T12:16:50.3588003Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:50.3588003Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:50.3597988Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:50.3597988Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:50.3607981Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:50.3617973Z INFO : Writing state FIM to registry.
2023-10-16T12:16:50.3617973Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:50.3627953Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:50.3637962Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:50.3637962Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:50.3647977Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:51.0268371Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\efw64\\manifest.dat
2023-10-16T12:16:51.4238597Z INFO : Installing Component: Sophos Endpoint Firewall for Windows v2.3.93
2023-10-16T12:16:51.4248633Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:51.499Z [ 9184: 9188] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\efw64\integrity.dat'
2023-10-16T12:16:51.548Z [ 9184: 9188] I Successfully established interface IProductSetup2.
2023-10-16T12:16:51.590Z [ 9184: 9188] I Reboot state: 0
2023-10-16T12:16:51.590Z [ 9184: 9188] I Successfully installed product CD297D6B-58A5-474F-8A0D-0A15803B8B50 2.3.93.
2023-10-16T12:16:51.5998697Z INFO : Installed Sophos Endpoint Firewall for Windows v2.3.93: 0 (reboot code: 0)
2023-10-16T12:16:51.6008708Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:51.6028705Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:51.6038695Z INFO : Writing XML for the state of the components
2023-10-16T12:16:51.6068719Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:51.6088715Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:51.6088715Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:51.6098705Z INFO : Writing state MCS to registry.
2023-10-16T12:16:51.6098705Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:51.6108731Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:51.6108731Z INFO : Writing state SHS to registry.
2023-10-16T12:16:51.6140063Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:51.6140063Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:51.6152690Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:51.6158704Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:51.6168730Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:51.6178717Z INFO : Writing state FIM to registry.
2023-10-16T12:16:51.6178717Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:51.6188723Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:51.6198716Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:51.6198716Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:51.6208718Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:51.6888757Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\fim\\fimfeed_manifest.dat
2023-10-16T12:16:51.7328788Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\fim\\manifest.dat
2023-10-16T12:16:52.3299117Z INFO : Installing Component: Sophos File Integrity Monitoring v1.0.3.449
2023-10-16T12:16:52.3309117Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:52.438Z [ 8576: 5092] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\fim\integrity.dat'
2023-10-16T12:16:52.485Z [ 8576: 5092] I Successfully established interface IProductSetup2.
2023-10-16T12:16:53.769Z [ 8576: 5092] I Reboot state: 0
2023-10-16T12:16:53.769Z [ 8576: 5092] I Successfully installed product FileIntegrityMonitoring 1.0.3.449.
2023-10-16T12:16:53.7819870Z INFO : Installed Sophos File Integrity Monitoring v1.0.3.449: 0 (reboot code: 0)
2023-10-16T12:16:53.7829874Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:16:53.7829874Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:16:53.7839886Z INFO : Writing XML for the state of the components
2023-10-16T12:16:53.7849869Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:16:53.7859868Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:16:53.7869893Z INFO : Writing state SED64 to registry.
2023-10-16T12:16:53.7869893Z INFO : Writing state MCS to registry.
2023-10-16T12:16:53.7879866Z INFO : Writing state SSE64 to registry.
2023-10-16T12:16:53.7879866Z INFO : Writing state SFS64 to registry.
2023-10-16T12:16:53.7889889Z INFO : Writing state SHS to registry.
2023-10-16T12:16:53.7889889Z INFO : Writing state UI64 to registry.
2023-10-16T12:16:53.7909895Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:16:53.7909895Z INFO : Writing state SME64 to registry.
2023-10-16T12:16:53.7919886Z INFO : Writing state ESH64 to registry.
2023-10-16T12:16:53.7919886Z INFO : Writing state EFW64 to registry.
2023-10-16T12:16:53.7929895Z INFO : Writing state FIM to registry.
2023-10-16T12:16:53.7929895Z INFO : Writing state NTP64 to registry.
2023-10-16T12:16:53.7939876Z INFO : Writing state SDU64 to registry.
2023-10-16T12:16:53.7939876Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:16:53.7949870Z INFO : Writing state SAUXG to registry.
2023-10-16T12:16:53.7959922Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:16:53.9329958Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\ntp64\\manifest.dat
2023-10-16T12:16:55.5220691Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\ntp64\\policy_overrides\\overrides_manifest.dat
2023-10-16T12:16:55.5440697Z INFO : Installing Component: Sophos Malicious Traffic Detection (64-bit) v1.17.3508
2023-10-16T12:16:55.5450724Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:16:55.626Z [ 6212: 1484] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\integrity.dat'
2023-10-16T12:16:55.628Z [ 6212: 1484] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\integrity_scm.dat'
2023-10-16T12:16:55.696Z [ 6212: 1484] I Successfully established interface IProductSetup2.
2023-10-16T12:17:57.053Z [ 6212: 1484] I Reboot state: 0
2023-10-16T12:17:57.053Z [ 6212: 1484] W Failed to install product NTP64 1.17.3508.
2023-10-16T12:17:57.0640278Z ERROR : su-setup: exit 1
2023-10-16T12:17:57.0650275Z INFO : Installed Sophos Malicious Traffic Detection (64-bit) v1.17.3508: -2147213568 (reboot code: 0)
2023-10-16T12:19:57.0684812Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:19:57.138Z [ 2724: 2820] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\integrity.dat'
2023-10-16T12:19:57.139Z [ 2724: 2820] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\integrity_scm.dat'
2023-10-16T12:19:57.176Z [ 2724: 2820] I Successfully established interface IProductSetup2.
2023-10-16T12:20:58.327Z [ 2724: 2820] I Reboot state: 0
2023-10-16T12:20:58.327Z [ 2724: 2820] W Failed to install product NTP64 1.17.3508.
2023-10-16T12:20:58.3352170Z ERROR : su-setup: exit 1
2023-10-16T12:20:58.3352170Z INFO : Installed Sophos Malicious Traffic Detection (64-bit) v1.17.3508: -2147213568 (reboot code: 0)
2023-10-16T12:24:58.3415143Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:24:58.415Z [ 7472: 4944] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\integrity.dat'
2023-10-16T12:24:58.416Z [ 7472: 4944] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\integrity_scm.dat'
2023-10-16T12:24:58.451Z [ 7472: 4944] I Successfully established interface IProductSetup2.
2023-10-16T12:25:59.635Z [ 7472: 4944] I Reboot state: 0
2023-10-16T12:25:59.635Z [ 7472: 4944] W Failed to install product NTP64 1.17.3508.
2023-10-16T12:25:59.6464527Z ERROR : su-setup: exit 1
2023-10-16T12:25:59.6474525Z INFO : Installed Sophos Malicious Traffic Detection (64-bit) v1.17.3508: -2147213568 (reboot code: 0)
2023-10-16T12:25:59.6474525Z ERROR : Installation failed
2023-10-16T12:25:59.6484510Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:25:59.6494533Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:25:59.6504513Z INFO : Writing XML for the state of the components
2023-10-16T12:25:59.6524522Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:25:59.6534520Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:25:59.6544519Z INFO : Writing state SED64 to registry.
2023-10-16T12:25:59.6544519Z INFO : Writing state MCS to registry.
2023-10-16T12:25:59.6554524Z INFO : Writing state SSE64 to registry.
2023-10-16T12:25:59.6564521Z INFO : Writing state SFS64 to registry.
2023-10-16T12:25:59.6574527Z INFO : Writing state SHS to registry.
2023-10-16T12:25:59.6574527Z INFO : Writing state UI64 to registry.
2023-10-16T12:25:59.6584522Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:25:59.6604515Z INFO : Writing state SME64 to registry.
2023-10-16T12:25:59.6616502Z INFO : Writing state ESH64 to registry.
2023-10-16T12:25:59.6624524Z INFO : Writing state EFW64 to registry.
2023-10-16T12:25:59.6634536Z INFO : Writing state FIM to registry.
2023-10-16T12:25:59.6634536Z INFO : Writing state NTP64 to registry.
2023-10-16T12:25:59.6644530Z INFO : Writing state SDU64 to registry.
2023-10-16T12:25:59.6654510Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:25:59.6654510Z INFO : Writing state SAUXG to registry.
2023-10-16T12:25:59.6664509Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:26:00.1129658Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sdu64\\manifest.dat
2023-10-16T12:26:00.7559733Z INFO : Installing Component: Sophos Diagnostic Utility for Windows 6.15.1417
2023-10-16T12:26:00.7559733Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:26:00.841Z [ 7724: 8068] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sdu64\integrity.dat'
2023-10-16T12:26:00.898Z [ 7724: 8068] I Successfully established interface IProductSetup2.
2023-10-16T12:26:01.115Z [ 7724: 8068] I Reboot state: 0
2023-10-16T12:26:01.115Z [ 7724: 8068] I Successfully installed product SDU64 6.15.1417.
2023-10-16T12:26:01.1259772Z INFO : Installed Sophos Diagnostic Utility for Windows 6.15.1417: 0 (reboot code: 0)
2023-10-16T12:26:01.1259772Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:26:01.1269764Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:26:01.1279778Z INFO : Writing XML for the state of the components
2023-10-16T12:26:01.1299761Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:26:01.1299761Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:26:01.1309757Z INFO : Writing state SED64 to registry.
2023-10-16T12:26:01.1309757Z INFO : Writing state MCS to registry.
2023-10-16T12:26:01.1319770Z INFO : Writing state SSE64 to registry.
2023-10-16T12:26:01.1319770Z INFO : Writing state SFS64 to registry.
2023-10-16T12:26:01.1329786Z INFO : Writing state SHS to registry.
2023-10-16T12:26:01.1339816Z INFO : Writing state UI64 to registry.
2023-10-16T12:26:01.1339816Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:26:01.1349797Z INFO : Writing state SME64 to registry.
2023-10-16T12:26:01.1349797Z INFO : Writing state ESH64 to registry.
2023-10-16T12:26:01.1359794Z INFO : Writing state EFW64 to registry.
2023-10-16T12:26:01.1359794Z INFO : Writing state FIM to registry.
2023-10-16T12:26:01.1359794Z INFO : Writing state NTP64 to registry.
2023-10-16T12:26:01.1369788Z INFO : Writing state SDU64 to registry.
2023-10-16T12:26:01.1369788Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:26:01.1379810Z INFO : Writing state SAUXG to registry.
2023-10-16T12:26:01.1379810Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:26:01.2619858Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\hmpa64\\manifest.dat
2023-10-16T12:26:01.8479878Z INFO : Installing Component: Sophos HitmanPro Alert v3.9.1.2325
2023-10-16T12:26:01.8489936Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:26:01.926Z [ 8704: 3252] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\hmpa64\integrity.dat'
2023-10-16T12:26:01.985Z [ 8704: 3252] I Successfully established interface IProductSetup2.
2023-10-16T12:26:08.386Z [ 8704: 3252] I Reboot state: 0
2023-10-16T12:26:08.386Z [ 8704: 3252] I Successfully installed product 244E68BF-E1BB-4A6B-AC18-A492DE0134C0 3.9.1.2325.
2023-10-16T12:26:08.3958450Z INFO : Installed Sophos HitmanPro Alert v3.9.1.2325: 0 (reboot code: 0)
2023-10-16T12:26:08.3958450Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:26:08.3968467Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:26:08.3988791Z INFO : Writing XML for the state of the components
2023-10-16T12:26:08.4008479Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:26:08.4008479Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:26:08.4018494Z INFO : Writing state SED64 to registry.
2023-10-16T12:26:08.4028449Z INFO : Writing state MCS to registry.
2023-10-16T12:26:08.4038492Z INFO : Writing state SSE64 to registry.
2023-10-16T12:26:08.4038492Z INFO : Writing state SFS64 to registry.
2023-10-16T12:26:08.4048449Z INFO : Writing state SHS to registry.
2023-10-16T12:26:08.4048449Z INFO : Writing state UI64 to registry.
2023-10-16T12:26:08.4058449Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:26:08.4068440Z INFO : Writing state SME64 to registry.
2023-10-16T12:26:08.4068440Z INFO : Writing state ESH64 to registry.
2023-10-16T12:26:08.4078496Z INFO : Writing state EFW64 to registry.
2023-10-16T12:26:08.4088485Z INFO : Writing state FIM to registry.
2023-10-16T12:26:08.4088485Z INFO : Writing state NTP64 to registry.
2023-10-16T12:26:08.4098474Z INFO : Writing state SDU64 to registry.
2023-10-16T12:26:08.4108471Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:26:08.4108471Z INFO : Writing state SAUXG to registry.
2023-10-16T12:26:08.4128469Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:26:08.5318467Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sau\\manifest.dat
2023-10-16T12:26:09.5108596Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sau\\repairkit\\repairkit.manifest.dat
2023-10-16T12:26:09.7168675Z INFO : Checking manifest:C:\\ProgramData\\Sophos\\AutoUpdate\\Cache\\decoded\\sau\\telemsup\\telemetry.manifest.dat
2023-10-16T12:26:09.7418683Z INFO : Installing Component: Sophos AutoUpdate v6.15.1417
2023-10-16T12:26:09.7428667Z INFO : setupDll='setup64.dll'; setupExe='su-setup64.exe'.
2023-10-16T12:26:09.879Z [ 8936: 3200] I Loading attested files from: 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sau\integrity.dat'
2023-10-16T12:26:09.934Z [ 8936: 3200] I Successfully established interface IProductSetup2.
2023-10-16T12:26:10.635Z [ 8936: 3200] I Reboot state: 0
2023-10-16T12:26:10.635Z [ 8936: 3200] I Successfully installed product 1FE3E7DF-EFFA-408A-A1B0-89F15BA61F31 6.15.1417.
2023-10-16T12:26:10.6418871Z INFO : Installed Sophos AutoUpdate v6.15.1417: 0 (reboot code: 0)
2023-10-16T12:26:10.6428871Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2023-10-16T12:26:10.6438876Z INFO : Overwriting state file C:\\ProgramData\\Sophos\\AutoUpdate\\data\\status\\SophosUpdateStatus.xml
2023-10-16T12:26:10.6448881Z INFO : Writing XML for the state of the components
2023-10-16T12:26:10.6458879Z INFO : Writing state CRTSETUP to registry.
2023-10-16T12:26:10.6468886Z INFO : Writing state UNINSTALLER64 to registry.
2023-10-16T12:26:10.6468886Z INFO : Writing state SED64 to registry.
2023-10-16T12:26:10.6488868Z INFO : Writing state MCS to registry.
2023-10-16T12:26:10.6498987Z INFO : Writing state SSE64 to registry.
2023-10-16T12:26:10.6498987Z INFO : Writing state SFS64 to registry.
2023-10-16T12:26:10.6508853Z INFO : Writing state SHS to registry.
2023-10-16T12:26:10.6518896Z INFO : Writing state UI64 to registry.
2023-10-16T12:26:10.6528869Z INFO : Writing state AMSI64 to registry.
2023-10-16T12:26:10.6528869Z INFO : Writing state SME64 to registry.
2023-10-16T12:26:10.6538869Z INFO : Writing state ESH64 to registry.
2023-10-16T12:26:10.6548873Z INFO : Writing state EFW64 to registry.
2023-10-16T12:26:10.6548873Z INFO : Writing state FIM to registry.
2023-10-16T12:26:10.6558906Z INFO : Writing state NTP64 to registry.
2023-10-16T12:26:10.6568896Z INFO : Writing state SDU64 to registry.
2023-10-16T12:26:10.6568896Z INFO : Writing state HMPA64 to registry.
2023-10-16T12:26:10.6578878Z INFO : Writing state SAUXG to registry.
2023-10-16T12:26:10.6588880Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2023-10-16T12:26:11.2649019Z ERROR : SetupPluginCommand::onRun() failed with ComponentInstaller::InstallError: Failed to install component(s): NTP64
2023-10-16T12:26:11.2649019Z INFO : Extracting CRT result from: C:\\Users\\FBS_AD~1\\AppData\\Local\\Temp\\TelemetryConfig.json
2023-10-16T12:26:11.2669024Z INFO : Command 'SetupPlugin' completed with failure with reboot code '0' and error message 'Software konnte nicht installiert werden'.
2023-10-16T12:26:11.2679029Z ERROR : Installation failed.
2023-10-16T12:26:11.2679029Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/8d6ba54b-8df9-4428-b9b8-9d5034772777
2023-10-16T12:26:11.2919029Z INFO : Did not discover an URL for a PAC file
2023-10-16T12:26:11.2929031Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2023-10-16T12:26:11.2949027Z INFO : Set security protocol: 00000800
2023-10-16T12:26:11.2959021Z INFO : Opening connection to mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
2023-10-16T12:26:11.2959021Z INFO : Sending request for connection confirmation through potential proxy
2023-10-16T12:26:11.2959021Z INFO : Request content size: 0
2023-10-16T12:26:11.3389050Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:26:11.3429046Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:26:11.3439028Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:26:11.3469023Z INFO : Certificate check succeeded
2023-10-16T12:26:11.3469023Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:26:11.3565837Z INFO : Response status code: 200
2023-10-16T12:26:11.3575831Z INFO : Response data size: 168
2023-10-16T12:26:11.3575831Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2023-10-16T12:26:11.3585819Z INFO : Request content size: 1040
2023-10-16T12:26:11.3585819Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:26:11.3625822Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:26:11.3635819Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:26:11.3685809Z INFO : Certificate check succeeded
2023-10-16T12:26:11.3685809Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:26:11.3895828Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2023-10-16T12:26:11.3935841Z INFO : Subject certificate failed validation against root CA: SophosCA1
2023-10-16T12:26:11.3945830Z INFO : Subject certificate failed validation against root CA: SophosCA2
2023-10-16T12:26:11.3995840Z INFO : Certificate check succeeded
2023-10-16T12:26:11.3995840Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2023-10-16T12:26:11.4005828Z INFO : Response status code: 200
2023-10-16T12:26:11.4005828Z INFO : Response data size: 0



This thread was automatically locked due to age.
  • Thank you for reaching out to the community forum.

    Can you confirm whether this is a fresh installation with the server or a re-installation process? 

    Can you also share with us the log for NTP, which can be found on your server's Temp folder. 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hello

    This is a re-installation. Here is the log:

    2023-10-16T13:22:54.575Z [ 7760: 6392] I Begin IProductSetup2::Install for Sophos Network Threat Protection
    2023-10-16T13:22:54.577Z [ 7760: 6392] A Constructing installer for Sophos Network Threat Protection
    2023-10-16T13:22:54.577Z [ 7760: 6392] I ZTNA is not installed: nothing to uninstall
    2023-10-16T13:22:54.756Z [ 7760: 6392] I Running: NTP installer
    2023-10-16T13:22:54.756Z [ 7760: 6392] I Executing step: Current Installation Version Logger
    2023-10-16T13:22:54.757Z [ 7760: 6392] I NTP Version: <Not Installed>
    2023-10-16T13:22:54.763Z [ 7760: 6392] I Sntp Version: <Not Installed>
    2023-10-16T13:22:54.763Z [ 7760: 6392] I SophosZtnaTap Version: <Not Installed>
    2023-10-16T13:22:54.763Z [ 7760: 6392] I SntpService Version: <Not Installed>
    2023-10-16T13:22:54.763Z [ 7760: 6392] I Executing step: To Be Installed Version Logger
    2023-10-16T13:22:54.763Z [ 7760: 6392] I NTP Version: 1.17.3508
    2023-10-16T13:22:54.765Z [ 7760: 6392] I Sntp Version: 1.17.2950
    2023-10-16T13:22:54.765Z [ 7760: 6392] I SophosZtnaTap Version: 9.24.6.3
    2023-10-16T13:22:54.768Z [ 7760: 6392] I SntpService Version: 1.17.3508
    2023-10-16T13:22:54.768Z [ 7760: 6392] I Executing step: NTP directory installer
    2023-10-16T13:22:54.768Z [ 7760: 6392] I Executing step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection and all parent directories
    2023-10-16T13:22:54.770Z [ 7760: 6392] I Executing step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration and all parent directories
    2023-10-16T13:22:54.771Z [ 7760: 6392] I Executing step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules and all parent directories
    2023-10-16T13:22:54.772Z [ 7760: 6392] I Executing step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors and all parent directories
    2023-10-16T13:22:54.776Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection and all parent directories
    2023-10-16T13:22:54.777Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;LS)
    2023-10-16T13:22:54.777Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs and all parent directories
    2023-10-16T13:22:54.777Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;LS)
    2023-10-16T13:22:54.779Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS and all parent directories
    2023-10-16T13:22:54.779Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Heartbeat and all parent directories
    2023-10-16T13:22:54.780Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;LS)
    2023-10-16T13:22:54.781Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Heartbeat\Config and all parent directories
    2023-10-16T13:22:54.782Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Heartbeat\Logs and all parent directories
    2023-10-16T13:22:54.782Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;LS)
    2023-10-16T13:22:54.783Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Heartbeat\Persist and all parent directories
    2023-10-16T13:22:54.784Z [ 7760: 6392] I Executing step: Driver installer
    2023-10-16T13:22:54.784Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 3 files
    2023-10-16T13:22:54.784Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.sys, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.sys)
    2023-10-16T13:22:54.786Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.inf, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.inf)
    2023-10-16T13:22:54.788Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.cat, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.cat)
    2023-10-16T13:22:54.789Z [ 7760: 6392] I Executing step: CopyFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.sys, C:\Windows\system32\Drivers\sntp.sys)
    2023-10-16T13:22:54.815Z [ 7760: 6392] I Executing step: Install service step: sntp
    2023-10-16T13:22:54.816Z [ 7760: 6392] I Successfully created service: 'sntp'.
    2023-10-16T13:22:54.816Z [ 7760: 6392] I Set service description to: 'Sophos Network Threat Protection Driver'.
    2023-10-16T13:22:54.816Z [ 7760: 6392] I Executing step: Start service step: sntp
    2023-10-16T13:22:54.880Z [ 7760: 6392] I Waiting 60000ms for service to start.
    2023-10-16T13:22:54.880Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:22:54.880Z [ 7760: 6392] I The service is running.
    2023-10-16T13:22:54.880Z [ 7760: 6392] I Executing step: Event manifest installer
    2023-10-16T13:22:54.880Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.man, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.man)
    2023-10-16T13:22:54.881Z [ 7760: 6392] I Executing step: RegisterEventManifest(C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.man)
    2023-10-16T13:22:55.124Z [ 7760: 6392] I Executing step: ZTNA driver uninstaller
    2023-10-16T13:22:55.124Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\ZTNA, NameServer)
    2023-10-16T13:22:55.124Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.124Z [ 7760: 6392] I Executing step: LoggingRegKeys installer
    2023-10-16T13:22:55.124Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\Heartbeat)
    2023-10-16T13:22:55.125Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\IOfficeAV)
    2023-10-16T13:22:55.126Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\SophosIPS.exe)
    2023-10-16T13:22:55.126Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\SophosNetFilter.exe)
    2023-10-16T13:22:55.127Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\SophosNtpService.exe)
    2023-10-16T13:22:55.128Z [ 7760: 6392] I Executing step: Product information installer
    2023-10-16T13:22:55.128Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection)
    2023-10-16T13:22:55.128Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;CI;KR;;;BU)(A;CI;KA;;;BA)(A;CI;KA;;;SY)(A;CIIO;KA;;;CO)(A;CI;KR;;;AC)(A;CI;KR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)
    2023-10-16T13:22:55.128Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Application)
    2023-10-16T13:22:55.129Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Telemetry)
    2023-10-16T13:22:55.129Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Telemetry\Heartbeat)
    2023-10-16T13:22:55.130Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Telemetry\MTD)
    2023-10-16T13:22:55.130Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\ModernWebApplication)
    2023-10-16T13:22:55.131Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, ProductCode, 64 Bit, {2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA})
    2023-10-16T13:22:55.131Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, ProductVersion, 64 Bit, 1.17.3508)
    2023-10-16T13:22:55.131Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, Path, 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\)
    2023-10-16T13:22:55.131Z [ 7760: 6392] I Executing step: Service installer
    2023-10-16T13:22:55.131Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNtpService.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe)
    2023-10-16T13:22:55.140Z [ 7760: 6392] I Executing step: Install service step: SntpService
    2023-10-16T13:22:55.143Z [ 7760: 6392] I Successfully created service: 'SntpService'.
    2023-10-16T13:22:55.143Z [ 7760: 6392] I Set service description to: 'Protects the computer against network-based threats.'.
    2023-10-16T13:22:55.143Z [ 7760: 6392] I Set service failure actions to:
    2023-10-16T13:22:55.143Z [ 7760: 6392] I Reset Period = 86400 seconds.
    2023-10-16T13:22:55.143Z [ 7760: 6392] I Reboot Message = "".
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Run Command String = "".
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Service Failure Action #0
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Action Type: 1
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Delay: 120000 milliseconds.
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Service Failure Action #1
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Action Type: 1
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Delay: 120000 milliseconds.
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Service Failure Action #2
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Action Type: 0
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Delay: 0 milliseconds.
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Set service SID type to: Unrestricted.
    2023-10-16T13:22:55.144Z [ 7760: 6392] I Setting service security
    2023-10-16T13:22:55.145Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService)
    2023-10-16T13:22:55.146Z [ 7760: 6392] I Executing step: SetRegistryValue(SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService, (Default), 64 Bit, service)
    2023-10-16T13:22:55.147Z [ 7760: 6392] I Executing step: AddIFEOAppCompatRegEntries(SophosNtpService.exe)
    2023-10-16T13:22:55.148Z [ 7760: 6392] I Executing step: Heartbeat installer
    2023-10-16T13:22:55.148Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Notice.txt, C:\Program Files\Sophos\Sophos Network Threat Protection\Notice.txt)
    2023-10-16T13:22:55.150Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Heartbeat\Config\Heartbeat.xml, C:\ProgramData\Sophos\Heartbeat\Config\Heartbeat.xml)
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\LocalKeys, C:\ProgramData\Sophos\Heartbeat\Persist\LocalKeys)
    2023-10-16T13:22:55.152Z [ 7760: 6392] I CopyFileStep: file not found, skipping: C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\LocalKeys
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\Policy, C:\ProgramData\Sophos\Heartbeat\Persist\Policy)
    2023-10-16T13:22:55.152Z [ 7760: 6392] I CopyFileStep: file not found, skipping: C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\Policy
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Executing step: DeleteFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\LocalKeys)
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Deleting File: C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\LocalKeys skipped -- the file does not exist.
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Executing step: DeleteFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\Policy)
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Deleting File: C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\Policy skipped -- the file does not exist.
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Heartbeat.dll)
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\Heartbeat.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.152Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Heartbeat)
    2023-10-16T13:22:55.153Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Heartbeat\Config)
    2023-10-16T13:22:55.153Z [ 7760: 6392] I Executing step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Heartbeat)
    2023-10-16T13:22:55.154Z [ 7760: 6392] I Executing step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Heartbeat\Status)
    2023-10-16T13:22:55.155Z [ 7760: 6392] I Executing step: HealthApi installer
    2023-10-16T13:22:55.155Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\HealthApi.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\HealthApi.dll)
    2023-10-16T13:22:55.156Z [ 7760: 6392] I Executing step: Telemetry installer
    2023-10-16T13:22:55.157Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe)
    2023-10-16T13:22:55.158Z [ 7760: 6392] I Executing step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Telemetry\Plugins\NTP)
    2023-10-16T13:22:55.159Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Telemetry\Plugins\NTP, Path, 32 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe)
    2023-10-16T13:22:55.159Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Telemetry\Plugins\NTP, Cmd, 32 Bit, SophosNtpTelemetry.exe)
    2023-10-16T13:22:55.159Z [ 7760: 6392] I Executing step: AddIFEOAppCompatRegEntries(SophosNtpTelemetry.exe)
    2023-10-16T13:22:55.160Z [ 7760: 6392] I Executing step: SofDat installer
    2023-10-16T13:22:55.160Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\sof.dat, C:\Program Files\Sophos\Sophos Network Threat Protection\sof.dat)
    2023-10-16T13:22:55.161Z [ 7760: 6392] I Executing step: Runtime installer
    2023-10-16T13:22:55.161Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 4 files
    2023-10-16T13:22:55.161Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\concrt140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\concrt140.dll)
    2023-10-16T13:22:55.163Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\msvcp140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\msvcp140.dll)
    2023-10-16T13:22:55.165Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\vccorlib140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\vccorlib140.dll)
    2023-10-16T13:22:55.167Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\vcruntime140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\vcruntime140.dll)
    2023-10-16T13:22:55.168Z [ 7760: 6392] I Executing step: Snort installer
    2023-10-16T13:22:55.168Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 3 files
    2023-10-16T13:22:55.168Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosIPS.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosIPS.exe)
    2023-10-16T13:22:55.171Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\sf_engine.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\sf_engine.dll)
    2023-10-16T13:22:55.172Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Notice.SophosIPS.txt, C:\Program Files\Sophos\Sophos Network Threat Protection\Notice.SophosIPS.txt)
    2023-10-16T13:22:55.173Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 1 files
    2023-10-16T13:22:55.173Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules\sophos_module.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules\sophos_module.dll)
    2023-10-16T13:22:55.175Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 9 files
    2023-10-16T13:22:55.175Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dce2.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dce2.dll)
    2023-10-16T13:22:55.177Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dns.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dns.dll)
    2023-10-16T13:22:55.180Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ftptelnet.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ftptelnet.dll)
    2023-10-16T13:22:55.182Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_imap.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_imap.dll)
    2023-10-16T13:22:55.189Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_pop.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_pop.dll)
    2023-10-16T13:22:55.190Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_smtp.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_smtp.dll)
    2023-10-16T13:22:55.191Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssh.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssh.dll)
    2023-10-16T13:22:55.192Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll)
    2023-10-16T13:22:55.193Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll)
    2023-10-16T13:22:55.212Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 4 files
    2023-10-16T13:22:55.212Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\classification.config, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\classification.config)
    2023-10-16T13:22:55.213Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\reference.config, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\reference.config)
    2023-10-16T13:22:55.215Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\sophosips.conf, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\sophosips.conf)
    2023-10-16T13:22:55.220Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\unicode.map, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\unicode.map)
    2023-10-16T13:22:55.222Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 3 files
    2023-10-16T13:22:55.222Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS\aac.conf, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\aac.conf)
    2023-10-16T13:22:55.223Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS\system.rules, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\system.rules)
    2023-10-16T13:22:55.224Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS\extras.rules, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\extras.rules)
    2023-10-16T13:22:55.225Z [ 7760: 6392] I Executing step: AddIFEOAppCompatRegEntries(SophosIPS.exe)
    2023-10-16T13:22:55.226Z [ 7760: 6392] I Executing step: Web installer
    2023-10-16T13:22:55.226Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNetFilter.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNetFilter.exe)
    2023-10-16T13:22:55.232Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\magic.mime, C:\Program Files\Sophos\Sophos Network Threat Protection\magic.mime)
    2023-10-16T13:22:55.234Z [ 7760: 6392] I Executing step: AddIFEOAppCompatRegEntries(SophosNetFilter.exe)
    2023-10-16T13:22:55.235Z [ 7760: 6392] I Executing step: Uninstaller file installer
    2023-10-16T13:22:55.235Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe)
    2023-10-16T13:22:55.242Z [ 7760: 6392] I Executing step: AddIFEOAppCompatRegEntries(SophosNtpUninstall.exe)
    2023-10-16T13:22:55.242Z [ 7760: 6392] I Executing step: NTP add/remove programs installer
    2023-10-16T13:22:55.242Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA})
    2023-10-16T13:22:55.243Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, AuthorizedCDFPrefix, 64 Bit, )
    2023-10-16T13:22:55.243Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Comments, 64 Bit, Network threat protection)
    2023-10-16T13:22:55.243Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Contact, 64 Bit, Sophos Technical Support)
    2023-10-16T13:22:55.243Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, DisplayIcon, 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe)
    2023-10-16T13:22:55.244Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, DisplayName, 64 Bit, Sophos Network Threat Protection)
    2023-10-16T13:22:55.244Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, DisplayVersion, 64 Bit, 1.17.3508)
    2023-10-16T13:22:55.244Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, EstimatedSize, 64 Bit, 28670)
    2023-10-16T13:22:55.244Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, HelpLink, 64 Bit, www.sophos.com/.../)
    2023-10-16T13:22:55.245Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, InstallDate, 64 Bit, 20231016)
    2023-10-16T13:22:55.245Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, InstallLocation, 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection)
    2023-10-16T13:22:55.245Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, InstallSource, 64 Bit, )
    2023-10-16T13:22:55.245Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Language, 64 Bit, 1033)
    2023-10-16T13:22:55.246Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, ModifyPath, 64 Bit, )
    2023-10-16T13:22:55.246Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, NoModify, 64 Bit, 1)
    2023-10-16T13:22:55.246Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, NoRepair, 64 Bit, 1)
    2023-10-16T13:22:55.246Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Publisher, 64 Bit, Sophos Limited)
    2023-10-16T13:22:55.246Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, UninstallString, 64 Bit, "C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe")
    2023-10-16T13:22:55.247Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, URLInfoAbout, 64 Bit, https://www.sophos.com/)
    2023-10-16T13:22:55.247Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, VersionMajor, 64 Bit, 1)
    2023-10-16T13:22:55.247Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, VersionMinor, 64 Bit, 17)
    2023-10-16T13:22:55.247Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, SystemComponent, 64 Bit, 1)
    2023-10-16T13:22:55.247Z [ 7760: 6392] I Executing step: NTP Ips Config installer
    2023-10-16T13:22:55.247Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\2023101201.ips, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2023101201.ips)
    2023-10-16T13:22:55.252Z [ 7760: 6392] I Executing step: SetFileSecurity("C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2023101201.ips" to "D:(A;;GA;;;S-1-5-18)(A;;GRFR;;;SU)")
    2023-10-16T13:22:55.253Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, IpsRulesPath, 64 Bit, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2023101201.ips)
    2023-10-16T13:22:55.253Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, IpsCurrentRules)
    2023-10-16T13:22:55.253Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.253Z [ 7760: 6392] I Executing step: PolicyOverrides installer
    2023-10-16T13:22:55.253Z [ 7760: 6392] I Executing step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection\PolicyOverrides and all parent directories
    2023-10-16T13:22:55.255Z [ 7760: 6392] I Executing step: CopyMultipleFilesStep: copying 2 files
    2023-10-16T13:22:55.255Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\policy_overrides\nics.json, C:\ProgramData\Sophos\Sophos Network Threat Protection\PolicyOverrides\nics.json)
    2023-10-16T13:22:55.256Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\policy_overrides\services.json, C:\ProgramData\Sophos\Sophos Network Threat Protection\PolicyOverrides\services.json)
    2023-10-16T13:22:55.257Z [ 7760: 6392] I Executing step: Upgrade Cleanup
    2023-10-16T13:22:55.257Z [ 7760: 6392] I Executing step: UnregisterUpdateableDllStep(WOW6432Node:HKLM\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\NTP,C:\Program Files\Sophos\Sophos Network Threat Protection\NTPAdapter.dll)
    2023-10-16T13:22:55.257Z [ 7760: 6392] I Executing step: UnregisterUpdateableDllStep(WOW6432Node:HKLM\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\HBT,C:\Program Files\Sophos\Sophos Network Threat Protection\HbtAdapter.dll)
    2023-10-16T13:22:55.258Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter\LegacyFramework)
    2023-10-16T13:22:55.258Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;OICI;KA;;;BA)(A;OICI;KA;;;SY)(A;OICI;KA;;;LS)(A;OICI;KR;;;BU)
    2023-10-16T13:22:55.259Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter\LegacyFramework, IsEnabled, 64 Bit, 0)
    2023-10-16T13:22:55.259Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter, latest, 64 Bit, 20231016132254756109)
    2023-10-16T13:22:55.259Z [ 7760: 6392] I Executing step: DeleteFile(C:\Windows\Installer\SourceHash{})
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Deleting File: C:\Windows\Installer\SourceHash{} skipped -- the file does not exist.
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Executing step: DeleteFile(C:\Windows\Installer\wix{}.SchedServiceConfig.rmi)
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Deleting File: C:\Windows\Installer\wix{}.SchedServiceConfig.rmi skipped -- the file does not exist.
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Telemetry.exe)
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\Telemetry.exe skipped -- the file does not exist.
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\SntpService.exe)
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\SntpService.exe skipped -- the file does not exist.
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Navl.dll)
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\Navl.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-console-l1-1-0.dll)
    2023-10-16T13:22:55.260Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-console-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-console-l1-2-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-console-l1-2-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-datetime-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-datetime-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-debug-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-debug-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-errorhandling-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-errorhandling-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l1-2-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l1-2-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l2-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l2-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-handle-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-handle-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-heap-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-heap-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-interlocked-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-interlocked-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-libraryloader-l1-1-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-libraryloader-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-localization-l1-2-0.dll)
    2023-10-16T13:22:55.261Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-localization-l1-2-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-memory-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-memory-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-namedpipe-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-namedpipe-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processenvironment-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processenvironment-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processthreads-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processthreads-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processthreads-l1-1-1.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processthreads-l1-1-1.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-profile-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-profile-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-rtlsupport-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-rtlsupport-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-string-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-string-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-synch-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-synch-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-synch-l1-2-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-synch-l1-2-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-sysinfo-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-sysinfo-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-timezone-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-timezone-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-util-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-util-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-conio-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-conio-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-convert-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-convert-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-environment-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-environment-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-filesystem-l1-1-0.dll)
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-filesystem-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.262Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-heap-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-heap-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-locale-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-locale-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-math-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-math-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-multibyte-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-multibyte-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-private-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-private-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-process-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-process-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-runtime-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-runtime-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-stdio-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-stdio-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-string-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-string-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-time-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-time-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-utility-l1-1-0.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-utility-l1-1-0.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\ucrtbase.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\ucrtbase.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Uninstall.exe)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\Uninstall.exe skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\NTPAdapter.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\NTPAdapter.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\HbtAdapter.dll)
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Deleting File: C:\Program Files\Sophos\Sophos Network Threat Protection\HbtAdapter.dll skipped -- the file does not exist.
    2023-10-16T13:22:55.263Z [ 7760: 6392] I Executing step: Delete directory (C:\Windows\Installer\{}) and its contents, if any.
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: Delete directory (C:\ProgramData\Sophos\Sophos Network Threat Protection\Config) and its contents, if any.
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\AutoUpdate\Products\{AFB2EB41-7301-4143-90D0-D19ADD7CA53D})
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\AutoUpdate\Products\{8087796B-2289-4897-98A5-58FF23DAAFD0})
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\AutoUpdate\Products\NTP)
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKCR\TypeLib\{6886D7DB-850A-4C92-A2F7-CBD741F825E5})
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKCR\AppID\{C092D533-8791-42F8-8EBE-DB116F79B4B7})
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection)
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus\AdapterFeatures)
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus\Status)
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus\TemporaryPolicy)
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter\RebootPending)
    2023-10-16T13:22:55.264Z [ 7760: 6392] I Executing step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Adapter Notifications)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Windows\Installer\{}\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\Config\)
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.265Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\Logs\)
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\Persist\)
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, WindowsInstaller)
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs, C:\Program Files\Sophos\Sophos Network Threat Protection\BPAIF.dll)
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs, C:\Program Files\Sophos\Sophos Network Threat Protection\navl.dll)
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus, in_effect_policy)
    2023-10-16T13:22:55.266Z [ 7760: 6392] W Registry key does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, SuppressedIpsSids)
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Registry value does not exist
    2023-10-16T13:22:55.266Z [ 7760: 6392] I Executing step: RemoveCatalogFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.cat)
    2023-10-16T13:22:55.272Z [ 7760: 6392] I Executing step: IOAV installer
    2023-10-16T13:22:55.272Z [ 7760: 6392] I Executing step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x64 and all parent directories
    2023-10-16T13:22:55.273Z [ 7760: 6392] I Executing step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x86 and all parent directories
    2023-10-16T13:22:55.274Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IOAV\x64\sophosofficeav.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x64\sophosofficeav.dll)
    2023-10-16T13:22:55.276Z [ 7760: 6392] I Executing step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IOAV\x86\sophosofficeav.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x86\sophosofficeav.dll)
    2023-10-16T13:22:55.277Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:22:55.278Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\Implemented Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49})
    2023-10-16T13:22:55.279Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32)
    2023-10-16T13:22:55.279Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID)
    2023-10-16T13:22:55.280Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib)
    2023-10-16T13:22:55.280Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID)
    2023-10-16T13:22:55.280Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:22:55.281Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\Implemented Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49})
    2023-10-16T13:22:55.282Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32)
    2023-10-16T13:22:55.282Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID)
    2023-10-16T13:22:55.282Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib)
    2023-10-16T13:22:55.283Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID)
    2023-10-16T13:22:55.283Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\AppID\{F81E5BAD-80F2-4DD9-B192-F21895C6E574})
    2023-10-16T13:22:55.284Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\AppID\SophosOfficeAV.DLL)
    2023-10-16T13:22:55.284Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl)
    2023-10-16T13:22:55.284Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CLSID)
    2023-10-16T13:22:55.285Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CurVer)
    2023-10-16T13:22:55.285Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:22:55.285Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1\CLSID)
    2023-10-16T13:22:55.286Z [ 7760: 6392] I Executing step: CreateRegistryKey(HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments)
    2023-10-16T13:22:55.286Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;CI;KR;;;BU)(A;CI;KA;;;BA)(A;CI;KA;;;SY)(A;CIIO;KA;;;CO)(A;CI;KR;;;AC)(A;CI;KR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)
    2023-10-16T13:22:55.286Z [ 7760: 6392] I Executing step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments)
    2023-10-16T13:22:55.286Z [ 7760: 6392] I Existing security permissions before resetting permissions: O:BAG:SYD:PAI(A;CI;KR;;;BU)(A;CI;KA;;;BA)(A;CI;KA;;;SY)(A;CIIO;KA;;;CO)(A;CI;KR;;;AC)(A;CI;KR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)
    2023-10-16T13:22:55.286Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:22:55.286Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, (Default), 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x64\sophosofficeav.dll)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, ThreadingModel, 64 Bit, Both)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib, (Default), 64 Bit, {D807910C-01C4-4077-89D3-03A155D35351})
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, (Default), 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x86\sophosofficeav.dll)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, ThreadingModel, 64 Bit, Both)
    2023-10-16T13:22:55.287Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib, (Default), 64 Bit, {D807910C-01C4-4077-89D3-03A155D35351})
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl)
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\AppID\{F81E5BAD-80F2-4DD9-B192-F21895C6E574}, (Default), 64 Bit, SophosIOAV)
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\AppID\SophosOfficeAV.DLL, AppID, 64 Bit, {F81E5BAD-80F2-4DD9-B192-F21895C6E574})
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CLSID, (Default), 64 Bit, {A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CurVer, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:22:55.288Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:22:55.289Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1\CLSID, (Default), 64 Bit, {A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:22:55.289Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments, ScanWithAntiVirus, 64 Bit, 3)
    2023-10-16T13:22:55.289Z [ 7760: 6392] I Executing step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments, ScanWithAntiVirus, 32 Bit, 3)
    2023-10-16T13:22:55.289Z [ 7760: 6392] I Executing step: Tamper protection controller
    2023-10-16T13:22:55.289Z [ 7760: 6392] I Executing step: Installing integrity manifest for NTP component.
    2023-10-16T13:22:55.301Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:22:55.301Z [ 7760: 6392] I SED has loaded integrity manifest.
    2023-10-16T13:22:55.301Z [ 7760: 6392] I Executing step: Installing integrity manifest for NTP_SCM component.
    2023-10-16T13:22:55.304Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:22:55.304Z [ 7760: 6392] I SED has loaded integrity manifest.
    2023-10-16T13:22:55.304Z [ 7760: 6392] I Executing step: Service controller
    2023-10-16T13:22:55.304Z [ 7760: 6392] I Executing step: Start service step: SntpService
    2023-10-16T13:22:55.726Z [ 7760: 6392] I Waiting 60000ms for service to start.
    2023-10-16T13:22:55.726Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:22:55.726Z [ 7760: 6392] I Retrying operation. Counter: 1
    2023-10-16T13:22:56.726Z [ 7760: 6392] I Retrying operation. Counter: 2
    2023-10-16T13:22:57.727Z [ 7760: 6392] I Retrying operation. Counter: 3
    2023-10-16T13:22:58.728Z [ 7760: 6392] I Retrying operation. Counter: 4
    2023-10-16T13:22:59.729Z [ 7760: 6392] I Retrying operation. Counter: 5
    2023-10-16T13:23:00.730Z [ 7760: 6392] I Retrying operation. Counter: 6
    2023-10-16T13:23:01.731Z [ 7760: 6392] I Retrying operation. Counter: 7
    2023-10-16T13:23:02.732Z [ 7760: 6392] I Retrying operation. Counter: 8
    2023-10-16T13:23:03.733Z [ 7760: 6392] I Retrying operation. Counter: 9
    2023-10-16T13:23:04.734Z [ 7760: 6392] I Retrying operation. Counter: 10
    2023-10-16T13:23:05.734Z [ 7760: 6392] I Retrying operation. Counter: 11
    2023-10-16T13:23:06.735Z [ 7760: 6392] I Retrying operation. Counter: 12
    2023-10-16T13:23:07.736Z [ 7760: 6392] I Retrying operation. Counter: 13
    2023-10-16T13:23:08.737Z [ 7760: 6392] I Retrying operation. Counter: 14
    2023-10-16T13:23:09.738Z [ 7760: 6392] I Retrying operation. Counter: 15
    2023-10-16T13:23:10.739Z [ 7760: 6392] I Retrying operation. Counter: 16
    2023-10-16T13:23:11.740Z [ 7760: 6392] I Retrying operation. Counter: 17
    2023-10-16T13:23:12.741Z [ 7760: 6392] I Retrying operation. Counter: 18
    2023-10-16T13:23:13.742Z [ 7760: 6392] I Retrying operation. Counter: 19
    2023-10-16T13:23:14.743Z [ 7760: 6392] I Retrying operation. Counter: 20
    2023-10-16T13:23:15.747Z [ 7760: 6392] I Retrying operation. Counter: 21
    2023-10-16T13:23:16.747Z [ 7760: 6392] I Retrying operation. Counter: 22
    2023-10-16T13:23:17.748Z [ 7760: 6392] I Retrying operation. Counter: 23
    2023-10-16T13:23:18.749Z [ 7760: 6392] I Retrying operation. Counter: 24
    2023-10-16T13:23:19.750Z [ 7760: 6392] I Retrying operation. Counter: 25
    2023-10-16T13:23:20.751Z [ 7760: 6392] I Retrying operation. Counter: 26
    2023-10-16T13:23:21.752Z [ 7760: 6392] I Retrying operation. Counter: 27
    2023-10-16T13:23:22.752Z [ 7760: 6392] I Retrying operation. Counter: 28
    2023-10-16T13:23:23.753Z [ 7760: 6392] I Retrying operation. Counter: 29
    2023-10-16T13:23:24.754Z [ 7760: 6392] I Retrying operation. Counter: 30
    2023-10-16T13:23:25.754Z [ 7760: 6392] I Retrying operation. Counter: 31
    2023-10-16T13:23:26.755Z [ 7760: 6392] I Retrying operation. Counter: 32
    2023-10-16T13:23:27.756Z [ 7760: 6392] I Retrying operation. Counter: 33
    2023-10-16T13:23:28.757Z [ 7760: 6392] I Retrying operation. Counter: 34
    2023-10-16T13:23:29.758Z [ 7760: 6392] I Retrying operation. Counter: 35
    2023-10-16T13:23:30.766Z [ 7760: 6392] I Retrying operation. Counter: 36
    2023-10-16T13:23:31.797Z [ 7760: 6392] I Retrying operation. Counter: 37
    2023-10-16T13:23:32.800Z [ 7760: 6392] I Retrying operation. Counter: 38
    2023-10-16T13:23:33.810Z [ 7760: 6392] I Retrying operation. Counter: 39
    2023-10-16T13:23:34.812Z [ 7760: 6392] I Retrying operation. Counter: 40
    2023-10-16T13:23:35.818Z [ 7760: 6392] I Retrying operation. Counter: 41
    2023-10-16T13:23:36.823Z [ 7760: 6392] I Retrying operation. Counter: 42
    2023-10-16T13:23:37.824Z [ 7760: 6392] I Retrying operation. Counter: 43
    2023-10-16T13:23:38.825Z [ 7760: 6392] I Retrying operation. Counter: 44
    2023-10-16T13:23:39.828Z [ 7760: 6392] I Retrying operation. Counter: 45
    2023-10-16T13:23:40.828Z [ 7760: 6392] I Retrying operation. Counter: 46
    2023-10-16T13:23:41.830Z [ 7760: 6392] I Retrying operation. Counter: 47
    2023-10-16T13:23:42.830Z [ 7760: 6392] I Retrying operation. Counter: 48
    2023-10-16T13:23:43.831Z [ 7760: 6392] I Retrying operation. Counter: 49
    2023-10-16T13:23:44.832Z [ 7760: 6392] I Retrying operation. Counter: 50
    2023-10-16T13:23:45.833Z [ 7760: 6392] I Retrying operation. Counter: 51
    2023-10-16T13:23:46.834Z [ 7760: 6392] I Retrying operation. Counter: 52
    2023-10-16T13:23:47.835Z [ 7760: 6392] I Retrying operation. Counter: 53
    2023-10-16T13:23:48.836Z [ 7760: 6392] I Retrying operation. Counter: 54
    2023-10-16T13:23:49.837Z [ 7760: 6392] I Retrying operation. Counter: 55
    2023-10-16T13:23:50.838Z [ 7760: 6392] I Retrying operation. Counter: 56
    2023-10-16T13:23:51.840Z [ 7760: 6392] I Retrying operation. Counter: 57
    2023-10-16T13:23:52.840Z [ 7760: 6392] I Retrying operation. Counter: 58
    2023-10-16T13:23:53.847Z [ 7760: 6392] I Retrying operation. Counter: 59
    2023-10-16T13:23:54.848Z [ 7760: 6392] I Retrying operation. Counter: 60
    2023-10-16T13:23:55.849Z [ 7760: 6392] E Timed out waiting for operation after 61 tries
    2023-10-16T13:23:55.850Z [ 7760: 6392] E Failed to start service "SntpService". Gathering diagnostic info...
    2023-10-16T13:23:55.850Z [ 7760: 6392] E ================================================================================
    2023-10-16T13:23:55.850Z [ 7760: 6392] E [SntpService Dependency Information]
    2023-10-16T13:23:55.850Z [ 7760: 6392] E >> Service "RpcEptMapper" start type: SERVICE_AUTO_START
    2023-10-16T13:23:55.850Z [ 7760: 6392] E >> Service "DcomLaunch" start type: SERVICE_AUTO_START
    2023-10-16T13:23:55.850Z [ 7760: 6392] E >> Service "RpcSs" start type: SERVICE_AUTO_START
    2023-10-16T13:23:55.850Z [ 7760: 6392] E >> Service "bfe" start type: SERVICE_AUTO_START
    2023-10-16T13:23:55.851Z [ 7760: 6392] E >> Service "sntp" start type: SERVICE_SYSTEM_START
    2023-10-16T13:23:55.851Z [ 7760: 6392] E >> Service "SntpService" start type: SERVICE_AUTO_START
    2023-10-16T13:23:55.851Z [ 7760: 6392] E [SntpService.log]
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.714Z [ 4864: 4936] A Log level changed from Error to Debug. Source: SOFTWARE\Sophos\Logging\NTP
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.714Z [ 4864: 4936] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.714Z [ 4864: 4936] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.714Z [ 4864: 6148] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.715Z [ 4864: 6148] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.723Z [ 4864: 4936] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.723Z [ 4864: 4936] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.723Z [ 4864: 6152] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.723Z [ 4864: 6152] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.725Z [ 4864: 4936] A ----------------------------------------------------------------------------------------------------
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.725Z [ 4864: 4936] A Starting version 1.17.3508 of the Sophos Network Threat Protection service.
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.725Z [ 4864: 4936] A ----------------------------------------------------------------------------------------------------
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.726Z [ 4864: 5040] A On service start
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.726Z [ 4864: 5436] D The service checkpoint thread has started.
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.726Z [ 4864: 5040] D + sedinterface::SedCommunicator::SedCommunicator()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.726Z [ 4864: 5040] A Process application information: Available
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.726Z [ 4864: 5040] D - sedinterface::SedCommunicator::SedCommunicator()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.726Z [ 4864: 5040] D + network::NetworkAdapterMonitor::NetworkAdapterMonitor()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.730Z [ 4864: 5040] D - network::NetworkAdapterMonitor::NetworkAdapterMonitor()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.730Z [ 4864: 5040] D + telemetry::TelemetryController::TelemetryController()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.730Z [ 4864: 5040] D - telemetry::TelemetryController::TelemetryController()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.730Z [ 4864: 5040] D + EventWriter::EventWriter()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.731Z [ 4864: 5040] D Initialised EventWriter, found eventGroupId value :
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.731Z [ 4864: 5040] D - EventWriter::EventWriter()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.731Z [ 4864: 5040] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 5040] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 2356] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 5040] D + winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.860Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 5040] I Adding policy watch for policy NetworkPerimeter from HeartbeatConfigChangeHandler
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 5040] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 5040] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 5040] D - winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 2356] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 2356] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.732Z [ 4864: 2356] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.733Z [ 4864: 2356] I Updating policy NetworkPerimeter to version 20231016121610760341
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.733Z [ 4864: 2356] I HeartbeatConfigChangeHandler: Invoking policy watch callback for policy NetworkPerimeter version 20231016121610760341
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.733Z [ 4864: 5040] D Returning loaded policy NetworkPerimeter version 20231016121610760341
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.733Z [ 4864: 5040] W Failed to load Heartbeat configuration: No Heartbeat configuration read
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.733Z [ 4864: 5040] D Loading configuration from Heartbeat.xml instead.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.738Z [ 4864: 5040] D Successfully loaded from Heartbeat.xml, copying to main configuration.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.738Z [ 4864: 5040] D Heartbeat configuration successfully copied.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.739Z [ 4864: 5040] D Returning loaded policy NetworkPerimeter version 20231016121610760341
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.739Z [ 4864: 5040] D Successfully loaded Heartbeat configuration, copying to Heartbeat.xml.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.780Z [ 4864: 5040] D Heartbeat configuration successfully copied.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.780Z [ 4864: 5040] I Initializing policy Updating from registry.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] I Updating policy Updating to version 20231016121558904607
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D + winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] I Adding policy watch for policy NetworkPerimeter from HeartbeatPolicyHandler
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D - winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D + winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] I Adding policy watch for policy Updating from HeartbeatFeaturesHandler
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D - winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D + winlib::registry::TransactionalRegistryStoreWatcher::WatchNamespace()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D Adding namespace watch for namespace Host from HeartbeatLoginInfoHandler
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 5040] D - winlib::registry::TransactionalRegistryStoreWatcher::WatchNamespace()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 2356] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.781Z [ 4864: 2356] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] E Expression: net_cfg_->Initialize(nullptr) failed: COM error 0x800106d9 Unknown error 0x800106D9
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] D + winlib::registry::TransactionalRegistryStoreWatcher::UnwatchNamespace()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] D Removing namespace watch for namespace Host
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] D - winlib::registry::TransactionalRegistryStoreWatcher::UnwatchNamespace()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 2356] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 2356] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.823Z [ 4864: 5040] D + winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.824Z [ 4864: 5040] I Removing policy watch for policy Updating
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.824Z [ 4864: 5040] D - winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.824Z [ 4864: 5040] D + winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.824Z [ 4864: 5040] I Removing policy watch for policy NetworkPerimeter
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.824Z [ 4864: 5040] D - winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] D + winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] I Removing policy watch for policy NetworkPerimeter
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] D - winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 2356] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 2356] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.826Z [ 4864: 5040] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.827Z [ 4864: 2708] I Signalled event is no longer available
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.827Z [ 4864: 5040] E Failed to start service: COM error 0x800106d9 Unknown error 0x800106D9
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.827Z [ 4864: 5040] E Could not start the service. COM error 0x800106d9 Unknown error 0x800106D9
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.827Z [ 4864: 5436] D The service checkpoint thread is about to end.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.827Z [ 4864: 4936] A The service has stopped.
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.829Z [ 4864: 4936] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.829Z [ 4864: 4936] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.829Z [ 4864: 4936] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:22:55.829Z [ 4864: 4936] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.861Z [ 7760: 6392] E >> 2023-10-16T13:23:40.241Z [ 9092: 9096] A Log level changed from Error to Debug. Source: SOFTWARE\Sophos\Logging\NTP
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.241Z [ 9092: 9096] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.241Z [ 9092: 9096] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.242Z [ 9092: 9100] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.242Z [ 9092: 9100] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.242Z [ 9092: 9096] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.242Z [ 9092: 9096] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.242Z [ 9092: 9104] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.242Z [ 9092: 9104] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.244Z [ 9092: 9096] A ----------------------------------------------------------------------------------------------------
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.244Z [ 9092: 9096] A Starting version 1.17.3508 of the Sophos Network Threat Protection service.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.244Z [ 9092: 9096] A ----------------------------------------------------------------------------------------------------
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.246Z [ 9092: 9108] A On service start
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.246Z [ 9092: 9108] D + sedinterface::SedCommunicator::SedCommunicator()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.246Z [ 9092: 9112] D The service checkpoint thread has started.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.246Z [ 9092: 9108] A Process application information: Available
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.246Z [ 9092: 9108] D - sedinterface::SedCommunicator::SedCommunicator()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.246Z [ 9092: 9108] D + network::NetworkAdapterMonitor::NetworkAdapterMonitor()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.249Z [ 9092: 9108] D - network::NetworkAdapterMonitor::NetworkAdapterMonitor()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.250Z [ 9092: 9108] D + telemetry::TelemetryController::TelemetryController()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.250Z [ 9092: 9108] D - telemetry::TelemetryController::TelemetryController()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.250Z [ 9092: 9108] D + EventWriter::EventWriter()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.250Z [ 9092: 9108] D Initialised EventWriter, found eventGroupId value :
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.250Z [ 9092: 9108] D - EventWriter::EventWriter()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9124] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] D + winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] I Adding policy watch for policy NetworkPerimeter from HeartbeatConfigChangeHandler
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9124] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9124] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9108] D - winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.251Z [ 9092: 9124] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.252Z [ 9092: 9124] I Updating policy NetworkPerimeter to version 20231016121610760341
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.252Z [ 9092: 9124] I HeartbeatConfigChangeHandler: Invoking policy watch callback for policy NetworkPerimeter version 20231016121610760341
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.252Z [ 9092: 9108] D Returning loaded policy NetworkPerimeter version 20231016121610760341
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.253Z [ 9092: 9108] D Successfully loaded Heartbeat configuration, copying to Heartbeat.xml.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.281Z [ 9092: 9108] D Heartbeat configuration successfully copied.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.282Z [ 9092: 9108] D Returning loaded policy NetworkPerimeter version 20231016121610760341
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.282Z [ 9092: 9108] D Successfully loaded Heartbeat configuration, copying to Heartbeat.xml.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.298Z [ 9092: 9108] D Heartbeat configuration successfully copied.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.298Z [ 9092: 9108] I Initializing policy Updating from registry.
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.298Z [ 9092: 9108] I Updating policy Updating to version 20231016121558904607
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.298Z [ 9092: 9108] D + winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.298Z [ 9092: 9108] I Adding policy watch for policy NetworkPerimeter from HeartbeatPolicyHandler
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.298Z [ 9092: 9108] D - winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D + winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] I Adding policy watch for policy Updating from HeartbeatFeaturesHandler
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D - winlib::policy::PolicyManager::WatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D + winlib::registry::TransactionalRegistryStoreWatcher::WatchNamespace()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D Adding namespace watch for namespace Host from HeartbeatLoginInfoHandler
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D + winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D - winlib::registry::RegistryWatcher::Watch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9108] D - winlib::registry::TransactionalRegistryStoreWatcher::WatchNamespace()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9124] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.299Z [ 9092: 9124] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] E Expression: net_cfg_->Initialize(nullptr) failed: COM error 0x800106d9 Unknown error 0x800106D9
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D + winlib::registry::TransactionalRegistryStoreWatcher::UnwatchNamespace()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D Removing namespace watch for namespace Host
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D - winlib::registry::TransactionalRegistryStoreWatcher::UnwatchNamespace()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9124] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9124] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D + winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] I Removing policy watch for policy Updating
    2023-10-16T13:23:55.862Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D - winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D + winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] I Removing policy watch for policy NetworkPerimeter
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.308Z [ 9092: 9108] D - winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] D + winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] I Removing policy watch for policy NetworkPerimeter
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] D - winlib::policy::PolicyManager::UnwatchPolicy()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9124] D + winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9124] D - winlib::registry::RegistryWatcher::OnReevaluate()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9116] I Signalled event is no longer available
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] E Failed to start service: COM error 0x800106d9 Unknown error 0x800106D9
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.313Z [ 9092: 9108] E Could not start the service. COM error 0x800106d9 Unknown error 0x800106D9
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.314Z [ 9092: 9112] D The service checkpoint thread is about to end.
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.314Z [ 9092: 9096] A The service has stopped.
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.315Z [ 9092: 9096] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.315Z [ 9092: 9096] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.315Z [ 9092: 9096] D + winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E >> 2023-10-16T13:23:40.315Z [ 9092: 9096] D - winlib::registry::RegistryWatcher::Unwatch()
    2023-10-16T13:23:55.863Z [ 7760: 6392] E ================================================================================
    2023-10-16T13:23:55.863Z [ 7760: 6392] W Timed Out. Service in state: 1
    2023-10-16T13:23:55.863Z [ 7760: 6392] E Failed step: Start service step: SntpService, rolling back previous steps
    2023-10-16T13:23:55.863Z [ 7760: 6392] W Failed composite step
    2023-10-16T13:23:55.863Z [ 7760: 6392] E Failed step: Service controller, rolling back previous steps
    2023-10-16T13:23:55.863Z [ 7760: 6392] I Rolling back step: Tamper protection controller
    2023-10-16T13:23:55.863Z [ 7760: 6392] I Rolling back step: Installing integrity manifest for NTP_SCM component.
    2023-10-16T13:23:55.864Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:23:55.864Z [ 7760: 6392] I SED has unloaded integrity manifest.
    2023-10-16T13:23:55.864Z [ 7760: 6392] I Rolling back step: Installing integrity manifest for NTP component.
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:23:55.866Z [ 7760: 6392] I SED has unloaded integrity manifest.
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Rolling back step: IOAV installer
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments, ScanWithAntiVirus, 32 Bit, 3)
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments, ScanWithAntiVirus, 64 Bit, 3)
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1\CLSID, (Default), 64 Bit, {A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:23:55.866Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CurVer, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CLSID, (Default), 64 Bit, {A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\AppID\SophosOfficeAV.DLL, AppID, 64 Bit, {F81E5BAD-80F2-4DD9-B192-F21895C6E574})
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\AppID\{F81E5BAD-80F2-4DD9-B192-F21895C6E574}, (Default), 64 Bit, SophosIOAV)
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl)
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib, (Default), 64 Bit, {D807910C-01C4-4077-89D3-03A155D35351})
    2023-10-16T13:23:55.867Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, ThreadingModel, 64 Bit, Both)
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, (Default), 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x86\sophosofficeav.dll)
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl)
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib, (Default), 64 Bit, {D807910C-01C4-4077-89D3-03A155D35351})
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID, (Default), 64 Bit, SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:23:55.868Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, ThreadingModel, 64 Bit, Both)
    2023-10-16T13:23:55.869Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32, (Default), 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x64\sophosofficeav.dll)
    2023-10-16T13:23:55.869Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}, (Default), 64 Bit, SophosIOAVImpl class)
    2023-10-16T13:23:55.869Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments)
    2023-10-16T13:23:55.869Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments)
    2023-10-16T13:23:55.870Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1\CLSID)
    2023-10-16T13:23:55.870Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl.1)
    2023-10-16T13:23:55.870Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CurVer)
    2023-10-16T13:23:55.870Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl\CLSID)
    2023-10-16T13:23:55.870Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\SophosIOAV.SophosIOAVImpl)
    2023-10-16T13:23:55.870Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\AppID\SophosOfficeAV.DLL)
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\AppID\{F81E5BAD-80F2-4DD9-B192-F21895C6E574})
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID)
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib)
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID)
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32)
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\Implemented Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49})
    2023-10-16T13:23:55.871Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:23:55.872Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\VersionIndependentProgID)
    2023-10-16T13:23:55.872Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\TypeLib)
    2023-10-16T13:23:55.872Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\ProgID)
    2023-10-16T13:23:55.872Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\InprocServer32)
    2023-10-16T13:23:55.872Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA}\Implemented Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49})
    2023-10-16T13:23:55.872Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Classes\CLSID\{A5509457-513F-46E3-B89C-029F94E5A2BA})
    2023-10-16T13:23:55.873Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IOAV\x86\sophosofficeav.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x86\sophosofficeav.dll)
    2023-10-16T13:23:55.874Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IOAV\x64\sophosofficeav.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x64\sophosofficeav.dll)
    2023-10-16T13:23:55.875Z [ 7760: 6392] I Rolling back step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x86 and all parent directories
    2023-10-16T13:23:55.876Z [ 7760: 6392] I Rolling back step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IOAV\x64 and all parent directories
    2023-10-16T13:23:55.876Z [ 7760: 6392] I Rolling back step: Upgrade Cleanup
    2023-10-16T13:23:55.876Z [ 7760: 6392] I Rolling back step: RemoveCatalogFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.cat)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, SuppressedIpsSids)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus, in_effect_policy)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs, C:\Program Files\Sophos\Sophos Network Threat Protection\navl.dll)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs, C:\Program Files\Sophos\Sophos Network Threat Protection\BPAIF.dll)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, WindowsInstaller)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\Persist\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\Logs\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\Config\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Heartbeat\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\)
    2023-10-16T13:23:55.878Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\ProgramData\Sophos\Sophos Network Threat Protection\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Program Files\Sophos\Sophos Network Threat Protection\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders, C:\Windows\Installer\{}\)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Adapter Notifications)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter\RebootPending)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus\TemporaryPolicy)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus\Status)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\PolicyStatus\AdapterFeatures)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKCR\AppID\{C092D533-8791-42F8-8EBE-DB116F79B4B7})
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(HKCR\TypeLib\{6886D7DB-850A-4C92-A2F7-CBD741F825E5})
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\AutoUpdate\Products\NTP)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\AutoUpdate\Products\{8087796B-2289-4897-98A5-58FF23DAAFD0})
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\AutoUpdate\Products\{AFB2EB41-7301-4143-90D0-D19ADD7CA53D})
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: Delete directory (C:\ProgramData\Sophos\Sophos Network Threat Protection\Config) and its contents, if any.
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: Delete directory (C:\Windows\Installer\{}) and its contents, if any.
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\HbtAdapter.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\NTPAdapter.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Uninstall.exe)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\ucrtbase.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-utility-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-time-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-string-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-stdio-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-runtime-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-process-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-private-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-multibyte-l1-1-0.dll)
    2023-10-16T13:23:55.879Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-math-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-locale-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-heap-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-filesystem-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-environment-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-convert-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-crt-conio-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-util-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-timezone-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-sysinfo-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-synch-l1-2-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-synch-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-string-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-rtlsupport-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-profile-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processthreads-l1-1-1.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processthreads-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-processenvironment-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-namedpipe-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-memory-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-localization-l1-2-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-libraryloader-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-interlocked-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-heap-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-handle-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l2-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l1-2-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-file-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-errorhandling-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-debug-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-datetime-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-console-l1-2-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\api-ms-win-core-console-l1-1-0.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Navl.dll)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\SntpService.exe)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Telemetry.exe)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Windows\Installer\wix{}.SchedServiceConfig.rmi)
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Windows\Installer\SourceHash{})
    2023-10-16T13:23:55.880Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter, latest, 64 Bit, 20231016132254756109)
    2023-10-16T13:23:55.881Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter\LegacyFramework, IsEnabled, 64 Bit, 0)
    2023-10-16T13:23:55.882Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Services\NTPAdapter\LegacyFramework)
    2023-10-16T13:23:55.883Z [ 7760: 6392] I Rolling back step: UnregisterUpdateableDllStep(WOW6432Node:HKLM\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\HBT,C:\Program Files\Sophos\Sophos Network Threat Protection\HbtAdapter.dll)
    2023-10-16T13:23:55.883Z [ 7760: 6392] I Rolling back step: UnregisterUpdateableDllStep(WOW6432Node:HKLM\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\NTP,C:\Program Files\Sophos\Sophos Network Threat Protection\NTPAdapter.dll)
    2023-10-16T13:23:55.883Z [ 7760: 6392] I Rolling back step: PolicyOverrides installer
    2023-10-16T13:23:55.883Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 2 files
    2023-10-16T13:23:55.883Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\policy_overrides\services.json, C:\ProgramData\Sophos\Sophos Network Threat Protection\PolicyOverrides\services.json)
    2023-10-16T13:23:55.883Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\policy_overrides\nics.json, C:\ProgramData\Sophos\Sophos Network Threat Protection\PolicyOverrides\nics.json)
    2023-10-16T13:23:55.884Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection\PolicyOverrides and all parent directories
    2023-10-16T13:23:55.885Z [ 7760: 6392] I Rolling back step: NTP Ips Config installer
    2023-10-16T13:23:55.885Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, IpsCurrentRules)
    2023-10-16T13:23:55.885Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, IpsRulesPath, 64 Bit, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2023101201.ips)
    2023-10-16T13:23:55.885Z [ 7760: 6392] I Rolling back step: SetFileSecurity("C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2023101201.ips" to "D:(A;;GA;;;S-1-5-18)(A;;GRFR;;;SU)")
    2023-10-16T13:23:55.890Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\2023101201.ips, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2023101201.ips)
    2023-10-16T13:23:55.891Z [ 7760: 6392] I Rolling back step: NTP add/remove programs installer
    2023-10-16T13:23:55.891Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, SystemComponent, 64 Bit, 1)
    2023-10-16T13:23:55.891Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, VersionMinor, 64 Bit, 17)
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, VersionMajor, 64 Bit, 1)
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, URLInfoAbout, 64 Bit, https://www.sophos.com/)
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, UninstallString, 64 Bit, "C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe")
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Publisher, 64 Bit, Sophos Limited)
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, NoRepair, 64 Bit, 1)
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, NoModify, 64 Bit, 1)
    2023-10-16T13:23:55.892Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, ModifyPath, 64 Bit, )
    2023-10-16T13:23:55.893Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Language, 64 Bit, 1033)
    2023-10-16T13:23:55.893Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, InstallSource, 64 Bit, )
    2023-10-16T13:23:55.893Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, InstallLocation, 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection)
    2023-10-16T13:23:55.893Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, InstallDate, 64 Bit, 20231016)
    2023-10-16T13:23:55.893Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, HelpLink, 64 Bit, www.sophos.com/.../)
    2023-10-16T13:23:55.893Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, EstimatedSize, 64 Bit, 28670)
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, DisplayVersion, 64 Bit, 1.17.3508)
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, DisplayName, 64 Bit, Sophos Network Threat Protection)
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, DisplayIcon, 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe)
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Contact, 64 Bit, Sophos Technical Support)
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, Comments, 64 Bit, Network threat protection)
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA}, AuthorizedCDFPrefix, 64 Bit, )
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA})
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: Uninstaller file installer
    2023-10-16T13:23:55.894Z [ 7760: 6392] I Rolling back step: AddIFEOAppCompatRegEntries(SophosNtpUninstall.exe)
    2023-10-16T13:23:55.896Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpUninstall.exe)
    2023-10-16T13:23:55.897Z [ 7760: 6392] I Rolling back step: Web installer
    2023-10-16T13:23:55.897Z [ 7760: 6392] I Rolling back step: AddIFEOAppCompatRegEntries(SophosNetFilter.exe)
    2023-10-16T13:23:55.897Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\magic.mime, C:\Program Files\Sophos\Sophos Network Threat Protection\magic.mime)
    2023-10-16T13:23:55.898Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNetFilter.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNetFilter.exe)
    2023-10-16T13:23:55.899Z [ 7760: 6392] I Rolling back step: Snort installer
    2023-10-16T13:23:55.899Z [ 7760: 6392] I Rolling back step: AddIFEOAppCompatRegEntries(SophosIPS.exe)
    2023-10-16T13:23:55.901Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 3 files
    2023-10-16T13:23:55.901Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS\extras.rules, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\extras.rules)
    2023-10-16T13:23:55.901Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS\system.rules, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\system.rules)
    2023-10-16T13:23:55.901Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS\aac.conf, C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\aac.conf)
    2023-10-16T13:23:55.902Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 4 files
    2023-10-16T13:23:55.902Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\unicode.map, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\unicode.map)
    2023-10-16T13:23:55.904Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\sophosips.conf, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\sophosips.conf)
    2023-10-16T13:23:55.905Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\reference.config, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\reference.config)
    2023-10-16T13:23:55.906Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Configuration\classification.config, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration\classification.config)
    2023-10-16T13:23:55.906Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 9 files
    2023-10-16T13:23:55.906Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll)
    2023-10-16T13:23:55.906Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssl.dll)
    2023-10-16T13:23:55.907Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssh.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ssh.dll)
    2023-10-16T13:23:55.907Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_smtp.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_smtp.dll)
    2023-10-16T13:23:55.908Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_pop.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_pop.dll)
    2023-10-16T13:23:55.908Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_imap.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_imap.dll)
    2023-10-16T13:23:55.909Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ftptelnet.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_ftptelnet.dll)
    2023-10-16T13:23:55.909Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dns.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dns.dll)
    2023-10-16T13:23:55.910Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dce2.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors\sf_dce2.dll)
    2023-10-16T13:23:55.910Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 1 files
    2023-10-16T13:23:55.910Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules\sophos_module.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules\sophos_module.dll)
    2023-10-16T13:23:55.911Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 3 files
    2023-10-16T13:23:55.911Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Notice.SophosIPS.txt, C:\Program Files\Sophos\Sophos Network Threat Protection\Notice.SophosIPS.txt)
    2023-10-16T13:23:55.911Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\sf_engine.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\sf_engine.dll)
    2023-10-16T13:23:55.912Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosIPS.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosIPS.exe)
    2023-10-16T13:23:55.913Z [ 7760: 6392] I Rolling back step: Runtime installer
    2023-10-16T13:23:55.913Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 4 files
    2023-10-16T13:23:55.913Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\vcruntime140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\vcruntime140.dll)
    2023-10-16T13:23:55.913Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\vccorlib140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\vccorlib140.dll)
    2023-10-16T13:23:55.914Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\msvcp140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\msvcp140.dll)
    2023-10-16T13:23:55.914Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\concrt140.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\concrt140.dll)
    2023-10-16T13:23:55.915Z [ 7760: 6392] I Rolling back step: SofDat installer
    2023-10-16T13:23:55.915Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\sof.dat, C:\Program Files\Sophos\Sophos Network Threat Protection\sof.dat)
    2023-10-16T13:23:55.915Z [ 7760: 6392] I Rolling back step: Telemetry installer
    2023-10-16T13:23:55.915Z [ 7760: 6392] I Rolling back step: AddIFEOAppCompatRegEntries(SophosNtpTelemetry.exe)
    2023-10-16T13:23:55.917Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Telemetry\Plugins\NTP, Cmd, 32 Bit, SophosNtpTelemetry.exe)
    2023-10-16T13:23:55.917Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Telemetry\Plugins\NTP, Path, 32 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe)
    2023-10-16T13:23:55.917Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Telemetry\Plugins\NTP)
    2023-10-16T13:23:55.918Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe)
    2023-10-16T13:23:55.918Z [ 7760: 6392] I Rolling back step: HealthApi installer
    2023-10-16T13:23:55.918Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\HealthApi.dll, C:\Program Files\Sophos\Sophos Network Threat Protection\HealthApi.dll)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: Heartbeat installer
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Heartbeat\Status)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(WOW6432Node:HKLM\SOFTWARE\Sophos\Heartbeat)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Heartbeat\Config)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Heartbeat)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Heartbeat.dll)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\Policy)
    2023-10-16T13:23:55.919Z [ 7760: 6392] I Rolling back step: DeleteFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\LocalKeys)
    2023-10-16T13:23:55.920Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\Policy, C:\ProgramData\Sophos\Heartbeat\Persist\Policy)
    2023-10-16T13:23:55.920Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\LocalKeys, C:\ProgramData\Sophos\Heartbeat\Persist\LocalKeys)
    2023-10-16T13:23:55.920Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Heartbeat\Config\Heartbeat.xml, C:\ProgramData\Sophos\Heartbeat\Config\Heartbeat.xml)
    2023-10-16T13:23:55.920Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Notice.txt, C:\Program Files\Sophos\Sophos Network Threat Protection\Notice.txt)
    2023-10-16T13:23:55.920Z [ 7760: 6392] I Rolling back step: Service installer
    2023-10-16T13:23:55.920Z [ 7760: 6392] I Rolling back step: AddIFEOAppCompatRegEntries(SophosNtpService.exe)
    2023-10-16T13:23:55.922Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService, (Default), 64 Bit, service)
    2023-10-16T13:23:55.922Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService)
    2023-10-16T13:23:55.922Z [ 7760: 6392] I Rolling back step: Install service step: SntpService
    2023-10-16T13:23:55.922Z [ 7760: 6392] I Rollback: deleting service: SntpService
    2023-10-16T13:23:55.923Z [ 7760: 6392] I Waiting 60000ms for service deletion
    2023-10-16T13:23:55.923Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:23:55.923Z [ 7760: 6392] I Successfully deleted service: SntpService
    2023-10-16T13:23:55.923Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\SophosNtpService.exe, C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe)
    2023-10-16T13:23:55.933Z [ 7760: 6392] I Rolling back step: Product information installer
    2023-10-16T13:23:55.933Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, Path, 64 Bit, C:\Program Files\Sophos\Sophos Network Threat Protection\)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, ProductVersion, 64 Bit, 1.17.3508)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: SetRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\Application, ProductCode, 64 Bit, {2D2A1891-4657-4E6F-9373-BFCE4C9AC5BA})
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\ModernWebApplication)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Telemetry\MTD)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Telemetry\Heartbeat)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Telemetry)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection\Application)
    2023-10-16T13:23:55.934Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Sophos Network Threat Protection)
    2023-10-16T13:23:55.935Z [ 7760: 6392] I Rolling back step: LoggingRegKeys installer
    2023-10-16T13:23:55.935Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\SophosNtpService.exe)
    2023-10-16T13:23:55.935Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\SophosNetFilter.exe)
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\SophosIPS.exe)
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\IOfficeAV)
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: CreateRegistryKey(HKLM\SOFTWARE\Sophos\Logging\NTP\Heartbeat)
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: ZTNA driver uninstaller
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: DeleteRegistryValue(SOFTWARE\Sophos\Sophos Network Threat Protection\ZTNA, NameServer)
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: Event manifest installer
    2023-10-16T13:23:55.936Z [ 7760: 6392] I Rolling back step: RegisterEventManifest(C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.man)
    2023-10-16T13:23:56.045Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.man, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.man)
    2023-10-16T13:23:56.046Z [ 7760: 6392] I Rolling back step: Driver installer
    2023-10-16T13:23:56.046Z [ 7760: 6392] I Rolling back step: Start service step: sntp
    2023-10-16T13:23:56.100Z [ 7760: 6392] I Waiting 60000ms for service stop
    2023-10-16T13:23:56.100Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:23:56.100Z [ 7760: 6392] I Service has stopped.
    2023-10-16T13:23:56.100Z [ 7760: 6392] I Rolling back step: Install service step: sntp
    2023-10-16T13:23:56.100Z [ 7760: 6392] I Rollback: deleting service: sntp
    2023-10-16T13:23:56.101Z [ 7760: 6392] I Waiting 60000ms for service deletion
    2023-10-16T13:23:56.101Z [ 7760: 6392] I Waiting for operation to succeed within 60000ms.
    2023-10-16T13:23:56.101Z [ 7760: 6392] I Successfully deleted service: sntp
    2023-10-16T13:23:56.101Z [ 7760: 6392] I Rolling back step: CopyFile(C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.sys, C:\Windows\system32\Drivers\sntp.sys)
    2023-10-16T13:23:56.102Z [ 7760: 6392] I Rolling back step: CopyMultipleFilesStep: copying 3 files
    2023-10-16T13:23:56.102Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.cat, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.cat)
    2023-10-16T13:23:56.104Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.inf, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.inf)
    2023-10-16T13:23:56.105Z [ 7760: 6392] I Rolling back step: CopyFile(C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ntp64\Sophos\Sophos Network Threat Protection\Sntp.sys, C:\Program Files\Sophos\Sophos Network Threat Protection\Sntp.sys)
    2023-10-16T13:23:56.106Z [ 7760: 6392] I Rolling back step: NTP directory installer
    2023-10-16T13:23:56.106Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Heartbeat\Persist and all parent directories
    2023-10-16T13:23:56.107Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Heartbeat\Logs and all parent directories
    2023-10-16T13:23:56.109Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Heartbeat\Config and all parent directories
    2023-10-16T13:23:56.109Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Heartbeat and all parent directories
    2023-10-16T13:23:56.110Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS and all parent directories
    2023-10-16T13:23:56.110Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs and all parent directories
    2023-10-16T13:23:56.115Z [ 7760: 6392] I Rolling back step: Create directory C:\ProgramData\Sophos\Sophos Network Threat Protection and all parent directories
    2023-10-16T13:23:56.116Z [ 7760: 6392] I Rolling back step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Preprocessors and all parent directories
    2023-10-16T13:23:56.117Z [ 7760: 6392] I Rolling back step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Dynamic Modules and all parent directories
    2023-10-16T13:23:56.117Z [ 7760: 6392] I Rolling back step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection\IPS Configuration and all parent directories
    2023-10-16T13:23:56.117Z [ 7760: 6392] I Rolling back step: Create directory C:\Program Files\Sophos\Sophos Network Threat Protection and all parent directories
    2023-10-16T13:23:56.117Z [ 7760: 6392] I Rolling back step: To Be Installed Version Logger
    2023-10-16T13:23:56.117Z [ 7760: 6392] I Rolling back step: Current Installation Version Logger
    2023-10-16T13:23:56.117Z [ 7760: 6392] W Failed composite step
    2023-10-16T13:23:56.117Z [ 7760: 6392] I Execution failed: NTP installer
    2023-10-16T13:23:56.118Z [ 7760: 6392] E Action failed; reboot is not required
    2023-10-16T13:23:56.118Z [ 7760: 6392] I End product setup

  • had a similar issue here.

    I found in your log: I Executing step: Start service step: SntpService

    and that failed after 60 sec.

    2023-10-16T13:23:55.849Z [ 7760: 6392] E Timed out waiting for operation after 61 tries
    2023-10-16T13:23:55.850Z [ 7760: 6392] E Failed to start service "SntpService". Gathering diagnostic info...
    2023-10-16T13:23:55.850Z [ 7760: 6392] E

    suggested solution: increase service start timeout

    community.sophos.com/.../mtr-update-failure-v2-4-0-59

  • Unfortunately SNTP Service was not installed during the last setup, I do not have it available in Service and can`t increase service start timeout

  • why? it is a global/OS-wide setting, not specific to a single service

  • When you perform the reinstallation, have you run Sophos Zap first to ensure no Sophos components are left on the system? 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • He means this setting:

    One thing Support suggested was to increase

    • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

    • ServicesPipeTimeout

    The default is 30000, I went to 90000 and started an update of the Endpoint. It succeeded. The Service seemed to start after ~46s according to the log.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.