[Sandboxie Beta] Sandboxie Beta 5.31 (Latest version 5.31.2)

All,

Please find Sandboxie Beta 5.31.2 below:

Combined installer 
Sandboxie Beta 64 bit installer 
Sandboxie Beta 32 bit installer 

Changes in 5.31.2
- Internet Explorer new tabs will no longer open a new window instead
- Addressed an issue in which certain installers would not start if triggered via forced folders

Known Issues
 -
Win 7 and 8.1 only - Internet Explorer - Program downloads will not initiate if Sandboxed (no workaround other than using a different browser)

Previous changes
Changes in Sandboxie 5.31.1
- Addressed a permissions issue that would prevent files from downloading or saving when Sandboxed on Windows Fast ring versions 18362/ 1903

To report a problem in this thread, please follow these guidelines:
How to report problems with Sandboxie

Parents
  • Since update 5.31.2 I have some issues:

    SBIE 5.31.2, Windows 10 1903, no AV

    1. Sandboxie runs in priviledged mode (e.g. links cannot be opened from Applications outside the box)

    2. I get the following errors while starting Chrome:

    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1
    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1
    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1

  • Hi Christoph,

    I am not sure what do you mean by " (e.g. links cannot be opened from Applications outside the box)"  . Can you clarify your settings?
    -Are there any extensions involved? If so, which ones. 
    -Please, post your Sandboxie.ini file after reproducing the issue in an new Sandboxie with default settings  (Configure --> Edit configuration , copy paste the contents here)

    Thank you!

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • Hi,

    I cleared my default box and started Chrome unboxed once. This has obviously fixed the problem, that Chrome or Sandboxie starts in priviledged mode.

    The problem, that applications outside the box cannot open a link in a sandboxed browser still exists. For example, using Thunderbird or Keepass and try to open an URL, the URL will not opened in sandboxed default browser Chrome.

     


    [GlobalSettings]

    Template=ActivIdentity
    Template=Microsoft_MSMQ
    Template=WindowsRasMan
    Template=7zipShellEx
    Template=SynapticsTouchPad
    Template=WindowsLive
    Template=AdobeAcrobatReader
    Template=OfficeLicensing
    ActivationPrompt=n
    ForceDisableSeconds=10
    TemplateReject=SystemAudioStream

    [DefaultBox]

    ConfigLevel=7
    AutoRecover=y
    Template=Chrome_Bookmarks_DirectAccess
    Template=Chrome_Force
    Template=Chrome_Passwords_DirectAccess
    Template=Chrome_History_DirectAccess
    Template=Firefox_Session_DirectAccess
    Template=Firefox_Bookmarks_DirectAccess
    Template=Firefox_Passwords_DirectAccess
    Template=Firefox_Force
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl
    Enabled=y
    CopyLimitKb=424962
    ForceFolder=D:\
    OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\sessions\
    NeverDelete=n
    OpenPipePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\storage\default\moz-extension+++6af0fa23-bd38-4565-b0f1-51d79abc3e53\
    OpenPipePath=chrome.exe,%Local AppData%\Google\Chrome\User Data\Default\databases\chrome-extension_edacconmaakjimmfgnblocblbcdcpbko_0\

    [UserSettings_25F803D5]

    SbieCtrl_UserName=christoph
    SbieCtrl_NextUpdateCheck=1562587690
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_ShowWelcome=n
    SbieCtrl_WindowCoords=1013,143,638,438
    SbieCtrl_ActiveView=40021
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_AutoApplySettings=y
    SbieCtrl_SaveRecoverTargets=y
    SbieCtrl_ProcessViewColumnWidths=250,70,300
    SbieCtrl_BoxExpandedView=DefaultBox,ExploitBox,Metamask,Plex,SecondBox,TestSoftwareBox,ThirdBox

    [TestSoftwareBox]

    ConfigLevel=7
    AutoRecover=y
    Template=AutoRecoverIgnore
    Template=Firefox_Phishing_DirectAccess
    Template=Chrome_Phishing_DirectAccess
    Template=LingerPrograms
    Template=BlockPorts
    Template=WindowsFontCache
    BorderColor=#00FFFF,ttl
    Enabled=y
    ForceProcess=firefox.exe
    CopyLimitKb=579418

    [ExploitBox]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl
    CopyLimitKb=423938

    [SecondBox]

    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl
    Enabled=y
    OpenWinClass=$:microsip.exe
    CopyLimitKb=408578
    ForceFolder=D:\
    OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\sessions\
    NeverDelete=n

    [ThirdBox]

    ConfigLevel=7
    AutoRecover=y
    Template=AutoRecoverIgnore
    Template=LingerPrograms
    Template=BlockPorts
    Template=WindowsFontCache
    BorderColor=#00FFFF,ttl
    Enabled=y
    OpenWinClass=$:microsip.exe
    CopyLimitKb=408578
    ForceFolder=D:\
    OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\sessions\
    NeverDelete=n
    ClosedFilePath=chrome.exe,%Tmpl.Chrome%\Last *

    [Metamask]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl

    [Plex]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl

     

    (I deleted the RecoveryFolder entries in this post)

Reply
  • Hi,

    I cleared my default box and started Chrome unboxed once. This has obviously fixed the problem, that Chrome or Sandboxie starts in priviledged mode.

    The problem, that applications outside the box cannot open a link in a sandboxed browser still exists. For example, using Thunderbird or Keepass and try to open an URL, the URL will not opened in sandboxed default browser Chrome.

     


    [GlobalSettings]

    Template=ActivIdentity
    Template=Microsoft_MSMQ
    Template=WindowsRasMan
    Template=7zipShellEx
    Template=SynapticsTouchPad
    Template=WindowsLive
    Template=AdobeAcrobatReader
    Template=OfficeLicensing
    ActivationPrompt=n
    ForceDisableSeconds=10
    TemplateReject=SystemAudioStream

    [DefaultBox]

    ConfigLevel=7
    AutoRecover=y
    Template=Chrome_Bookmarks_DirectAccess
    Template=Chrome_Force
    Template=Chrome_Passwords_DirectAccess
    Template=Chrome_History_DirectAccess
    Template=Firefox_Session_DirectAccess
    Template=Firefox_Bookmarks_DirectAccess
    Template=Firefox_Passwords_DirectAccess
    Template=Firefox_Force
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl
    Enabled=y
    CopyLimitKb=424962
    ForceFolder=D:\
    OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\sessions\
    NeverDelete=n
    OpenPipePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\storage\default\moz-extension+++6af0fa23-bd38-4565-b0f1-51d79abc3e53\
    OpenPipePath=chrome.exe,%Local AppData%\Google\Chrome\User Data\Default\databases\chrome-extension_edacconmaakjimmfgnblocblbcdcpbko_0\

    [UserSettings_25F803D5]

    SbieCtrl_UserName=christoph
    SbieCtrl_NextUpdateCheck=1562587690
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_ShowWelcome=n
    SbieCtrl_WindowCoords=1013,143,638,438
    SbieCtrl_ActiveView=40021
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_AutoApplySettings=y
    SbieCtrl_SaveRecoverTargets=y
    SbieCtrl_ProcessViewColumnWidths=250,70,300
    SbieCtrl_BoxExpandedView=DefaultBox,ExploitBox,Metamask,Plex,SecondBox,TestSoftwareBox,ThirdBox

    [TestSoftwareBox]

    ConfigLevel=7
    AutoRecover=y
    Template=AutoRecoverIgnore
    Template=Firefox_Phishing_DirectAccess
    Template=Chrome_Phishing_DirectAccess
    Template=LingerPrograms
    Template=BlockPorts
    Template=WindowsFontCache
    BorderColor=#00FFFF,ttl
    Enabled=y
    ForceProcess=firefox.exe
    CopyLimitKb=579418

    [ExploitBox]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl
    CopyLimitKb=423938

    [SecondBox]

    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl
    Enabled=y
    OpenWinClass=$:microsip.exe
    CopyLimitKb=408578
    ForceFolder=D:\
    OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\sessions\
    NeverDelete=n

    [ThirdBox]

    ConfigLevel=7
    AutoRecover=y
    Template=AutoRecoverIgnore
    Template=LingerPrograms
    Template=BlockPorts
    Template=WindowsFontCache
    BorderColor=#00FFFF,ttl
    Enabled=y
    OpenWinClass=$:microsip.exe
    CopyLimitKb=408578
    ForceFolder=D:\
    OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\3wqqxqec.default\sessions\
    NeverDelete=n
    ClosedFilePath=chrome.exe,%Tmpl.Chrome%\Last *

    [Metamask]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl

    [Plex]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    BorderColor=#00FFFF,ttl

     

    (I deleted the RecoveryFolder entries in this post)

Children
  • Hi Christoph,

    Thank you for the information. 

    - Is Chrome set as your default browser in Windows? 
    - What happens when you click on a URL  from Thunderbird? Does it open in non-Sandboxed Chrome? Or what is the behavior that you are seeing? 
    - Is Chrome already running (host or sandboxed) when you try to open the URL from say Thunderbird? 

    Also let me know the Thunderbird version so I can test this. 

    Thank you!

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • - yes, Chrome is the default browser set in Windows

    - I dont seeing anything, nothing happens

    - yes, Chrome was mostly running sandboxed where I have tried to open an URL. But, if Chrome isn't running, the same effect occours

    Thunderbird has version 60.7.2 (32 bit), but other applications like keepass, Adobe Reader, TexWorks and so on have the same behavior.

     

    Thank you very much in advance for your effort.

     

    P.S. Can you tell me how the future of Sandboxie will be? I read some alarming news. Sandboxie is the most important software on my pc.

  • Hi Christoph,

    Let's gather the output or Resource Access Monitor:
    www.sandboxie.com/ResourceAccessMonitor

    Create a new Sandbox with default settings
    Remove Template=Chrome_Force from your Default Sandbox
    Add Template=Chrome_Force to your newly created box
    Start Res. Acc. Mon
    Immediately repro the issue
    Copy-paste the output here

    Thank you!

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • Ok, I did it. The new sandbox is named as NewDef. I changed the template entries as described and ran the ressource monitor. Then I started the chrome browser and tried to open an URL in Thunderbird and Keepass. Still nothing happen. When the Chrome browser isn't running, and I click on a link in Thunderbird, it works.

     

    (Drive) \Device\CdRom0
    (Drive) \Device\HarddiskVolume1
    (Drive) \Device\HarddiskVolume4
    (Drive) \Device\HarddiskVolume6
    Clsid -------------------------------
    Clsid {148BD52A-A2AB-11CE-B11F-00AA00530503} Scheduling Agent Service Class
    Clsid {3CE74DE4-53D3-4D74-8B83-431B3828BA53} TF_DisplayAttributeMgr
    Clsid {529A9E6B-6587-4F23-AB9E-9C7D683E3C50} TF_ThreadMgr
    Clsid {69486DD6-C19F-42E8-B508-A53F9F8E67B8} Offline Files Service Control
    Clsid {6CA50344-051A-4DED-9779-A43305165E35} ?
    Clsid {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Windows Search Manager
    Clsid {88D96A05-F192-11D4-A65F-0040963251E5} XML DOM Document 6.0
    Clsid {A4B544A1-438D-4B41-9325-869523E2D6C7} TF_CategoryMgr
    Clsid {BCDE0395-E52F-467C-8E3D-C4579291692E} MMDeviceEnumerator class
    Clsid {E2B3C97F-6AE1-41AC-817A-F6F92166D7DD} HNetCfg.FwPolicy2
    Clsid {E77CC89B-7401-4C04-8CED-149DB35ADD04} ?
    Clsid unknown
    Clsid O {8BC3F05E-D86B-11D0-A075-00C04FB68820} Windows Management and Instrumentation
    File/Key -------------------------------
    Image -------------------------------
    Ipc -------------------------------
    Ipc ?
    Ipc \BaseNamedObjects\[CoreUI]-PID(584)-TID(16312) ff1a5a77-3718-451d-9284-f11b04071d60
    Ipc \BaseNamedObjects\[CoreUI]-PID(8716)-TID(9192) 32e95006-6c37-4f14-8187-1ddf57edd2f8
    Ipc \BaseNamedObjects\__ComCatalogCache__
    Ipc \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
    Ipc \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
    Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
    Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
    Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
    Ipc \BaseNamedObjects\RotHintTable
    Ipc \BaseNamedObjects\SC_AutoStartComplete
    Ipc \BaseNamedObjects\windows_shell_global_counters
    Ipc \RPC Control\actkernel
    Ipc \RPC Control\epmapper
    Ipc \RPC Control\eventlog
    Ipc \RPC Control\keysvc
    Ipc \RPC Control\LRPC-be3d875af6d6df0b80
    Ipc \RPC Control\OLE12DA247BF947F1332EDE760F8840
    Ipc \RPC Control\OLE16609AF8034E87B5AC8617BD6443
    Ipc \RPC Control\OLE242644C51645F40B1EB60FC063B8
    Ipc \RPC Control\OLE27A70AF2B7E36D6A39AFDDBB1940
    Ipc \RPC Control\OLE34F321E3AC021ECDDB30746555DB
    Ipc \RPC Control\OLE53C2A56298B6D3AFED4EC26D07E8
    Ipc \RPC Control\OLE625EF490F43B1C5730A8293366D9
    Ipc \RPC Control\OLE69B2DBD559017BBC28897558A514
    Ipc \RPC Control\OLE6BE7BB22AC1A1624E71DDF47FD6D
    Ipc \RPC Control\OLE7A03A7D659FBE347ECE598CC6B51
    Ipc \RPC Control\OLE9504B2763EE8E61F8C342F4CC43E
    Ipc \RPC Control\OLE9663ADC5BBB15DD7BA5E7919DFDF
    Ipc \RPC Control\OLEA4533063020A301EC0A59E9F6419
    Ipc \RPC Control\OLEB20C065DED09D7539471FE8A446A
    Ipc \RPC Control\OLEB4AE2DBBBF96F28465D3CA52767B
    Ipc \RPC Control\OLEBE229DB5B36194C3F1B2DF74D150
    Ipc \RPC Control\OLEC687545C02A1973971EA8EFD03A1
    Ipc \RPC Control\OLEE679354B06DEE4795B045DCAB33F
    Ipc \RPC Control\OLEF309CEF94FC782D8F74B0A134EB3
    Ipc \RPC Control\protected_storage
    Ipc \SBIE_DummyJob_chrome.exe_1
    Ipc \SBIE_DummyJob_chrome.exe_10
    Ipc \SBIE_DummyJob_chrome.exe_11
    Ipc \SBIE_DummyJob_chrome.exe_12
    Ipc \SBIE_DummyJob_chrome.exe_13
    Ipc \SBIE_DummyJob_chrome.exe_14
    Ipc \SBIE_DummyJob_chrome.exe_15
    Ipc \SBIE_DummyJob_chrome.exe_16
    Ipc \SBIE_DummyJob_chrome.exe_17
    Ipc \SBIE_DummyJob_chrome.exe_18
    Ipc \SBIE_DummyJob_chrome.exe_19
    Ipc \SBIE_DummyJob_chrome.exe_2
    Ipc \SBIE_DummyJob_chrome.exe_20
    Ipc \SBIE_DummyJob_chrome.exe_21
    Ipc \SBIE_DummyJob_chrome.exe_22
    Ipc \SBIE_DummyJob_chrome.exe_23
    Ipc \SBIE_DummyJob_chrome.exe_24
    Ipc \SBIE_DummyJob_chrome.exe_25
    Ipc \SBIE_DummyJob_chrome.exe_26
    Ipc \SBIE_DummyJob_chrome.exe_27
    Ipc \SBIE_DummyJob_chrome.exe_28
    Ipc \SBIE_DummyJob_chrome.exe_29
    Ipc \SBIE_DummyJob_chrome.exe_3
    Ipc \SBIE_DummyJob_chrome.exe_30
    Ipc \SBIE_DummyJob_chrome.exe_31
    Ipc \SBIE_DummyJob_chrome.exe_32
    Ipc \SBIE_DummyJob_chrome.exe_33
    Ipc \SBIE_DummyJob_chrome.exe_34
    Ipc \SBIE_DummyJob_chrome.exe_35
    Ipc \SBIE_DummyJob_chrome.exe_36
    Ipc \SBIE_DummyJob_chrome.exe_37
    Ipc \SBIE_DummyJob_chrome.exe_38
    Ipc \SBIE_DummyJob_chrome.exe_39
    Ipc \SBIE_DummyJob_chrome.exe_4
    Ipc \SBIE_DummyJob_chrome.exe_40
    Ipc \SBIE_DummyJob_chrome.exe_41
    Ipc \SBIE_DummyJob_chrome.exe_42
    Ipc \SBIE_DummyJob_chrome.exe_43
    Ipc \SBIE_DummyJob_chrome.exe_44
    Ipc \SBIE_DummyJob_chrome.exe_45
    Ipc \SBIE_DummyJob_chrome.exe_46
    Ipc \SBIE_DummyJob_chrome.exe_47
    Ipc \SBIE_DummyJob_chrome.exe_48
    Ipc \SBIE_DummyJob_chrome.exe_49
    Ipc \SBIE_DummyJob_chrome.exe_5
    Ipc \SBIE_DummyJob_chrome.exe_6
    Ipc \SBIE_DummyJob_chrome.exe_7
    Ipc \SBIE_DummyJob_chrome.exe_8
    Ipc \SBIE_DummyJob_chrome.exe_9
    Ipc \SBIE_DummyJob_software_reporter_tool.exe_1
    Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
    Ipc \Sessions\1\BaseNamedObjects\__OMADM_NAMED_MUTEX__
    Ipc \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
    Ipc \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
    Ipc \Sessions\1\BaseNamedObjects\{A946A6A9-917E-4949-B9BC-6BADA8C7FD63}
    Ipc \Sessions\1\BaseNamedObjects\13c8HWNDInterface:20d5a
    Ipc \Sessions\1\BaseNamedObjects\1b2cHWNDInterface:10b86
    Ipc \Sessions\1\BaseNamedObjects\1c90HWNDInterface:20cde
    Ipc \Sessions\1\BaseNamedObjects\1ImmersiveFocusTrackingActiveEvent
    Ipc \Sessions\1\BaseNamedObjects\1WaitForPendingInputEvent
    Ipc \Sessions\1\BaseNamedObjects\248HWNDInterface:1605b0
    Ipc \Sessions\1\BaseNamedObjects\248HWNDInterface:c0a48
    Ipc \Sessions\1\BaseNamedObjects\248HWNDInterface:e0a98
    Ipc \Sessions\1\BaseNamedObjects\2de0HWNDInterface:10d8c
    Ipc \Sessions\1\BaseNamedObjects\2e3cHWNDInterface:1d085a
    Ipc \Sessions\1\BaseNamedObjects\2f80HWNDInterface:620958
    Ipc \Sessions\1\BaseNamedObjects\3294HWNDInterface:10e26
    Ipc \Sessions\1\BaseNamedObjects\32a4HWNDInterface:10c0c
    Ipc \Sessions\1\BaseNamedObjects\330HWNDInterface:20d2e
    Ipc \Sessions\1\BaseNamedObjects\35d0HWNDInterface:10c02
    Ipc \Sessions\1\BaseNamedObjects\3a5cHWNDInterface:10cf6
    Ipc \Sessions\1\BaseNamedObjects\3d44HWNDInterface:10e16
    Ipc \Sessions\1\BaseNamedObjects\4088HWNDInterface:10c44
    Ipc \Sessions\1\BaseNamedObjects\40d4HWNDInterface:10b00
    Ipc \Sessions\1\BaseNamedObjects\4354HWNDInterface:20bc8
    Ipc \Sessions\1\BaseNamedObjects\4ba8HWNDInterface:20df2
    Ipc \Sessions\1\BaseNamedObjects\a48HWNDInterface:10db4
    Ipc \Sessions\1\BaseNamedObjects\c:!program files (x86)!google!chrome!application!chrome.exe
    Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
    Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
    Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
    Ipc \Sessions\1\BaseNamedObjects\C:*Users***********AppData*Local*Microsoft*Windows*Caches*{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000003d.db
    Ipc \Sessions\1\BaseNamedObjects\C:*Users***********AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db
    Ipc \Sessions\1\BaseNamedObjects\C:*Users***********AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
    Ipc \Sessions\1\BaseNamedObjects\C:*Users***********AppData*Local*Microsoft*Windows*Caches*cversions.3.ro
    Ipc \Sessions\1\BaseNamedObjects\ChromeProcessSingletonStartup!
    Ipc \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
    Ipc \Sessions\1\BaseNamedObjects\pipesynccmd_sync
    Ipc \Sessions\1\BaseNamedObjects\RotHintTable
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10088
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10188
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10272
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10524
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10584
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10676
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10696
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10732
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10824
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10928
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10968
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11056
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11184
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11240
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11260
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11408
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11588
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11636
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11672
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11712
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11744
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_11836
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1188
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12160
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12472
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12520
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12560
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12708
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12764
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12948
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_12964
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13212
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13328
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13632
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13692
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13776
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13800
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14144
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14424
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14472
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14604
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14780
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14940
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15056
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15112
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15148
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1536
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15456
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15492
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15592
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15612
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15632
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15684
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15804
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1616
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16264
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16380
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16412
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16464
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16520
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16528
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16596
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16728
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16760
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_16852
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17056
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17236
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17336
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17400
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17488
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17508
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17560
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17604
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17616
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17624
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17676
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17688
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_17936
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18040
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18148
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18176
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18288
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18300
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18476
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1888
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_19348
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_19368
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_19384
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_19432
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2152
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2344
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2380
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2632
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2844
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2872
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3124
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3356
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3560
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3624
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_396
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4240
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4368
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4564
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4912
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5064
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5192
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5236
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5520
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_584
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6928
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6956
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7244
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7312
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7340
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_772
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8080
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_816
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8224
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8232
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8424
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9008
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9084
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9392
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9656
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9752
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_9916
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceCrypto_Mutex1
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
    Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
    Ipc \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
    Ipc \Sessions\1\BaseNamedObjects\SboxSession
    Ipc \Sessions\1\BaseNamedObjects\SC_AutoStartComplete
    Ipc \Sessions\1\BaseNamedObjects\ScmCreatedEvent
    Ipc \Sessions\1\BaseNamedObjects\SM0:10088:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:10088:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:10088:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:10188:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:10188:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:10188:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:10584:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:10584:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:10584:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:10968:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:10968:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:10968:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11056:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11056:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11056:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11260:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11260:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11260:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11260:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11260:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11260:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11408:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11408:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11408:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11636:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11636:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11636:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11712:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11712:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11712:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11744:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11744:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11744:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11744:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11744:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11744:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11836:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11836:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11836:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:11836:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:11836:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:11836:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12160:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12160:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12160:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12160:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12160:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12160:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12472:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12472:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12472:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12520:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12520:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12520:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12520:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12520:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12520:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12560:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12560:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12560:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12764:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12764:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12764:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12948:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12948:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12948:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12948:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12948:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12948:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12964:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12964:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12964:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:12964:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:12964:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:12964:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:13328:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:13328:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:13328:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:13776:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:13776:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:13776:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:13776:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:13776:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:13776:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:14144:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:14144:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:14144:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:14780:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:14780:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:14780:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:14940:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:14940:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:14940:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:14940:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:14940:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:14940:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15056:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15056:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15056:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15056:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15056:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15056:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15148:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15148:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15148:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15456:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15456:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15456:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15456:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15456:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15456:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15592:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15592:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15592:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15612:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15612:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15612:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15684:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15684:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15684:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15684:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15684:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15684:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:15804:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:15804:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:15804:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:1616:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:1616:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:1616:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16264:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16264:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16264:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16464:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16464:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16464:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16464:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16464:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16464:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16520:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16520:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16520:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16520:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16520:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16520:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16596:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16596:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16596:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16596:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16596:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16596:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:16760:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:16760:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:16760:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17236:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17236:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17236:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17236:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17236:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17236:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17560:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17560:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17560:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17604:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17604:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17604:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17616:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17616:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17616:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17624:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17624:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17624:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17676:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17676:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17676:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:17688:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:17688:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:17688:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:18288:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:18288:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:18288:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:1888:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:1888:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:1888:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:19368:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:19368:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:19368:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:19368:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:19368:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:19368:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:19384:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:19384:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:19384:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:19432:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:19432:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:19432:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:2380:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:2380:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:2380:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:2632:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:2632:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:2632:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:2632:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:2632:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:2632:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:3124:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:3124:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:3124:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:3124:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:3124:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:3124:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:3560:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:3560:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:3560:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:4240:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:4240:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:4240:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:4368:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:4368:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:4368:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:4564:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:4564:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:4564:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:4912:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:4912:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:4912:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:5064:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:5064:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:5064:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:5064:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:5064:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:5064:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:5192:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:5192:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:5192:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:5192:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:5192:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:5192:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:5236:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:5236:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:5236:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:5520:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:5520:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:5520:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:584:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:584:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:584:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:584:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:584:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:584:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:6928:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:6928:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:6928:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:6956:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:6956:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:6956:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:6956:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:6956:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:6956:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:7312:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:7312:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:7312:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:7312:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:7312:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:7312:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:7340:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:7340:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:7340:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:8080:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:8080:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:8080:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:816:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:816:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:816:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:816:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:816:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:816:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:8424:120:WilError_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:8424:120:WilError_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:8424:120:WilError_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:8424:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:8424:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:8424:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:9008:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:9008:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:9008:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:9392:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:9392:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:9392:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:9656:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:9656:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:9656:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SM0:9752:304:WilStaging_02
    Ipc \Sessions\1\BaseNamedObjects\SM0:9752:304:WilStaging_02_p0
    Ipc \Sessions\1\BaseNamedObjects\SM0:9752:304:WilStaging_02_p0h
    Ipc \Sessions\1\BaseNamedObjects\SyncRootManager
    Ipc \Sessions\1\BaseNamedObjects\windows_shell_global_counters
    Ipc O \BaseNamedObjects\CoreMessagingRegistrar
    Ipc O \BaseNamedObjects\FontCachePort
    Ipc O \BaseNamedObjects\msctf.serverDefault1
    Ipc O \KernelObjects\LowMemoryCondition
    Ipc O \KernelObjects\MaximumCommitCondition
    Ipc O \KnownDlls\advapi32.dll
    Ipc O \KnownDlls\bcrypt.dll
    Ipc O \KnownDlls\bcryptPrimitives.dll
    Ipc O \KnownDlls\cfgmgr32.dll
    Ipc O \KnownDlls\clbcatq.dll
    Ipc O \KnownDlls\combase.dll
    Ipc O \KnownDlls\COMDLG32.dll
    Ipc O \KnownDlls\CRYPT32.dll
    Ipc O \KnownDlls\cryptsp.dll
    Ipc O \KnownDlls\gdi32.dll
    Ipc O \KnownDlls\gdi32full.dll
    Ipc O \KnownDlls\IMAGEHLP.dll
    Ipc O \KnownDlls\IMM32.dll
    Ipc O \KnownDlls\kernel.appcore.dll
    Ipc O \KnownDlls\kernel32.dll
    Ipc O \KnownDlls\kernelbase.dll
    Ipc O \KnownDlls\MSASN1.dll
    Ipc O \KnownDlls\MSCTF.dll
    Ipc O \KnownDlls\msvcp_win.dll
    Ipc O \KnownDlls\MSVCRT.dll
    Ipc O \KnownDlls\NSI.dll
    Ipc O \KnownDlls\ole32.dll
    Ipc O \KnownDlls\OLEAUT32.dll
    Ipc O \KnownDlls\powrprof.dll
    Ipc O \KnownDlls\profapi.dll
    Ipc O \KnownDlls\PSAPI.DLL
    Ipc O \KnownDlls\rpcrt4.dll
    Ipc O \KnownDlls\sechost.dll
    Ipc O \KnownDlls\Setupapi.dll
    Ipc O \KnownDlls\SHCORE.dll
    Ipc O \KnownDlls\SHELL32.dll
    Ipc O \KnownDlls\SHLWAPI.dll
    Ipc O \KnownDlls\ucrtbase.dll
    Ipc O \KnownDlls\UMPDC.dll
    Ipc O \KnownDlls\user32.dll
    Ipc O \KnownDlls\win32u.dll
    Ipc O \KnownDlls\windows.storage.dll
    Ipc O \KnownDlls\WINTRUST.dll
    Ipc O \KnownDlls\WS2_32.dll
    Ipc O \RPC Control\AudioClientRpc
    Ipc O \RPC Control\Audiosrv
    Ipc O \RPC Control\dhcpcsvc
    Ipc O \RPC Control\dhcpcsvc6
    Ipc O \RPC Control\LRPC-be3d875af6d6df0b80
    Ipc O \RPC Control\lsapolicylookup
    Ipc O \RPC Control\LSARPC_ENDPOINT
    Ipc O \RPC Control\lsasspirpc
    Ipc O \RPC Control\nlaapi
    Ipc O \RPC Control\samss lpc
    Ipc O \RPC Control\SbieSvcPort
    Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
    Ipc O \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
    Ipc O \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefault1
    Ipc O \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefault1
    Ipc O \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
    Ipc O \Sessions\1\Windows\ApiPort
    Ipc O \Sessions\1\Windows\DwmApiPort
    Ipc O \Sessions\1\Windows\SharedSection
    Ipc O \Sessions\1\Windows\Theme1947955107
    Ipc O \Sessions\1\Windows\ThemeSection
    Ipc O \ThemeApiPort
    Ipc O \Windows\Theme1142925783
    Pipe -------------------------------
    Pipe ?
    Pipe \Device\00000037
    Pipe \Device\CNG
    Pipe \Device\Harddisk1\DR1
    Pipe \Device\HarddiskVolume1
    Pipe \Device\HarddiskVolume2
    Pipe \Device\HarddiskVolume4
    Pipe \Device\HarddiskVolume5
    Pipe \Device\HarddiskVolume6
    Pipe \Device\KsecDD
    Pipe \Device\MountPointManager
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_11712_tkenmvaipxghbscn
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_11744_fnwkevmrimdypizg
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_11836_mymdfjponosfaihp
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_12160_kwjlgyrspgaojigi
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_12948_qvsbbdzrkymlsvey
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_12964_idwcawpxqzdzcbpl
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_13776_lcyruosnshteadev
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_14940_emqzjvqurstjievt
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_15684_nlebodpoemmmcfnm
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_16520_nusdkscflxvgllfe
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_16596_ittllhrvzjngrgtg
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_17236_jesgoguiilpuhuik
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_19368_jrczfpadtaiecsvp
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_2632_dtvjmfyjxcewppoy
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_5064_riudwpgicpkikgpk
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_584_cuugfkhobetduzhn
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_6956_guafpnckhkwmymca
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_7312_cnefsjdctheynbol
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_816_necwnwubtznzjcng
    Pipe \device\namedpipe\_sandbox_*********_newdef_session_1\crashpad_9392_difghvjuonyctzhn
    Pipe \Device\NamedPipe\crashpad_11712_TKENMVAIPXGHBSCN
    Pipe \device\namedpipe\crashpad_11712_tkenmvaipxghbscn
    Pipe \Device\NamedPipe\crashpad_11712_TKENMVAIPXGHBSCN
    Pipe \device\namedpipe\crashpad_11712_tkenmvaipxghbscn
    Pipe \Device\NamedPipe\crashpad_11744_FNWKEVMRIMDYPIZG
    Pipe \device\namedpipe\crashpad_11744_fnwkevmrimdypizg
    Pipe \Device\NamedPipe\crashpad_11744_FNWKEVMRIMDYPIZG
    Pipe \device\namedpipe\crashpad_11744_fnwkevmrimdypizg
    Pipe \device\namedpipe\crashpad_11836_mymdfjponosfaihp
    Pipe \Device\NamedPipe\crashpad_11836_MYMDFJPONOSFAIHP
    Pipe \device\namedpipe\crashpad_11836_mymdfjponosfaihp
    Pipe \Device\NamedPipe\crashpad_11836_MYMDFJPONOSFAIHP
    Pipe \device\namedpipe\crashpad_11836_mymdfjponosfaihp
    Pipe \device\namedpipe\crashpad_12160_kwjlgyrspgaojigi
    Pipe \Device\NamedPipe\crashpad_12160_KWJLGYRSPGAOJIGI
    Pipe \device\namedpipe\crashpad_12160_kwjlgyrspgaojigi
    Pipe \Device\NamedPipe\crashpad_12948_QVSBBDZRKYMLSVEY
    Pipe \device\namedpipe\crashpad_12948_qvsbbdzrkymlsvey
    Pipe \Device\NamedPipe\crashpad_12948_QVSBBDZRKYMLSVEY
    Pipe \device\namedpipe\crashpad_12948_qvsbbdzrkymlsvey
    Pipe \Device\NamedPipe\crashpad_12948_QVSBBDZRKYMLSVEY
    Pipe \device\namedpipe\crashpad_12948_qvsbbdzrkymlsvey
    Pipe \Device\NamedPipe\crashpad_12964_IDWCAWPXQZDZCBPL
    Pipe \device\namedpipe\crashpad_12964_idwcawpxqzdzcbpl
    Pipe \Device\NamedPipe\crashpad_12964_IDWCAWPXQZDZCBPL
    Pipe \device\namedpipe\crashpad_12964_idwcawpxqzdzcbpl
    Pipe \Device\NamedPipe\crashpad_13776_LCYRUOSNSHTEADEV
    Pipe \device\namedpipe\crashpad_13776_lcyruosnshteadev
    Pipe \Device\NamedPipe\crashpad_13776_LCYRUOSNSHTEADEV
    Pipe \device\namedpipe\crashpad_13776_lcyruosnshteadev
    Pipe \device\namedpipe\crashpad_14940_emqzjvqurstjievt
    Pipe \Device\NamedPipe\crashpad_14940_EMQZJVQURSTJIEVT
    Pipe \device\namedpipe\crashpad_14940_emqzjvqurstjievt
    Pipe \Device\NamedPipe\crashpad_14940_EMQZJVQURSTJIEVT
    Pipe \device\namedpipe\crashpad_14940_emqzjvqurstjievt
    Pipe \Device\NamedPipe\crashpad_15684_NLEBODPOEMMMCFNM
    Pipe \device\namedpipe\crashpad_15684_nlebodpoemmmcfnm
    Pipe \Device\NamedPipe\crashpad_15684_NLEBODPOEMMMCFNM
    Pipe \device\namedpipe\crashpad_15684_nlebodpoemmmcfnm
    Pipe \Device\NamedPipe\crashpad_16520_NUSDKSCFLXVGLLFE
    Pipe \device\namedpipe\crashpad_16520_nusdkscflxvgllfe
    Pipe \device\namedpipe\crashpad_16596_ittllhrvzjngrgtg
    Pipe \Device\NamedPipe\crashpad_16596_ITTLLHRVZJNGRGTG
    Pipe \device\namedpipe\crashpad_16596_ittllhrvzjngrgtg
    Pipe \Device\NamedPipe\crashpad_17236_JESGOGUIILPUHUIK
    Pipe \device\namedpipe\crashpad_17236_jesgoguiilpuhuik
    Pipe \Device\NamedPipe\crashpad_17236_JESGOGUIILPUHUIK
    Pipe \device\namedpipe\crashpad_17236_jesgoguiilpuhuik
    Pipe \device\namedpipe\crashpad_19368_jrczfpadtaiecsvp
    Pipe \Device\NamedPipe\crashpad_19368_JRCZFPADTAIECSVP
    Pipe \device\namedpipe\crashpad_19368_jrczfpadtaiecsvp
    Pipe \Device\NamedPipe\crashpad_2632_DTVJMFYJXCEWPPOY
    Pipe \device\namedpipe\crashpad_2632_dtvjmfyjxcewppoy
    Pipe \Device\NamedPipe\crashpad_2632_DTVJMFYJXCEWPPOY
    Pipe \device\namedpipe\crashpad_2632_dtvjmfyjxcewppoy
    Pipe \Device\NamedPipe\crashpad_5064_RIUDWPGICPKIKGPK
    Pipe \device\namedpipe\crashpad_5064_riudwpgicpkikgpk
    Pipe \Device\NamedPipe\crashpad_5064_RIUDWPGICPKIKGPK
    Pipe \device\namedpipe\crashpad_5064_riudwpgicpkikgpk
    Pipe \Device\NamedPipe\crashpad_584_CUUGFKHOBETDUZHN
    Pipe \device\namedpipe\crashpad_584_cuugfkhobetduzhn
    Pipe \Device\NamedPipe\crashpad_584_CUUGFKHOBETDUZHN
    Pipe \device\namedpipe\crashpad_584_cuugfkhobetduzhn
    Pipe \Device\NamedPipe\crashpad_6956_GUAFPNCKHKWMYMCA
    Pipe \device\namedpipe\crashpad_6956_guafpnckhkwmymca
    Pipe \Device\NamedPipe\crashpad_6956_GUAFPNCKHKWMYMCA
    Pipe \device\namedpipe\crashpad_6956_guafpnckhkwmymca
    Pipe \device\namedpipe\crashpad_7312_cnefsjdctheynbol
    Pipe \Device\NamedPipe\crashpad_7312_CNEFSJDCTHEYNBOL
    Pipe \device\namedpipe\crashpad_7312_cnefsjdctheynbol
    Pipe \device\namedpipe\crashpad_816_necwnwubtznzjcng
    Pipe \Device\NamedPipe\crashpad_816_NECWNWUBTZNZJCNG
    Pipe \device\namedpipe\crashpad_816_necwnwubtznzjcng
    Pipe \Device\NamedPipe\crashpad_9392_DIFGHVJUONYCTZHN
    Pipe \device\namedpipe\crashpad_9392_difghvjuonyctzhn
    Pipe \Device\NamedPipe\crashpad_9392_DIFGHVJUONYCTZHN
    Pipe \device\namedpipe\crashpad_9392_difghvjuonyctzhn
    Pipe \Device\NamedPipe\mojo.11712.15736.10909513801517930499
    Pipe \device\namedpipe\mojo.11712.15736.10909513801517930499
    Pipe \Device\NamedPipe\mojo.11712.16200.6230667657266781874
    Pipe \device\namedpipe\mojo.11712.16200.6230667657266781874
    Pipe \Device\NamedPipe\mojo.11712.16200.6230667657266781874
    Pipe \device\namedpipe\mojo.11712.16200.6230667657266781874
    Pipe \Device\NamedPipe\mojo.11744.17760.15593743586932928912
    Pipe \device\namedpipe\mojo.11744.17760.15593743586932928912
    Pipe \device\namedpipe\mojo.11744.17760.4177187322870017725
    Pipe \Device\NamedPipe\mojo.11744.17760.4177187322870017725
    Pipe \device\namedpipe\mojo.11744.17760.4177187322870017725
    Pipe \Device\NamedPipe\mojo.11744.17760.8682698293132811047
    Pipe \device\namedpipe\mojo.11744.17760.8682698293132811047
    Pipe \Device\NamedPipe\mojo.11744.17760.8682698293132811047
    Pipe \device\namedpipe\mojo.11744.17760.8682698293132811047
    Pipe \device\namedpipe\mojo.11744.17760.9877603666497035778
    Pipe \Device\NamedPipe\mojo.11744.17760.9877603666497035778
    Pipe \device\namedpipe\mojo.11744.17760.9877603666497035778
    Pipe \device\namedpipe\mojo.11836.5088.15070142614878222022
    Pipe \Device\NamedPipe\mojo.11836.5088.15070142614878222022
    Pipe \device\namedpipe\mojo.11836.5088.15070142614878222022
    Pipe \device\namedpipe\mojo.11836.5088.15555906951741325243
    Pipe \Device\NamedPipe\mojo.11836.5088.15555906951741325243
    Pipe \device\namedpipe\mojo.11836.5088.15555906951741325243
    Pipe \Device\NamedPipe\mojo.11836.5088.4157973162922939604
    Pipe \device\namedpipe\mojo.11836.5088.4157973162922939604
    Pipe \Device\NamedPipe\mojo.11836.5088.690066877826395192
    Pipe \device\namedpipe\mojo.11836.5088.690066877826395192
    Pipe \Device\NamedPipe\mojo.12160.10432.13001828081857886641
    Pipe \device\namedpipe\mojo.12160.10432.13001828081857886641
    Pipe \Device\NamedPipe\mojo.12160.10432.13001828081857886641
    Pipe \device\namedpipe\mojo.12160.10432.13001828081857886641
    Pipe \device\namedpipe\mojo.12160.10432.14784590641271824894
    Pipe \Device\NamedPipe\mojo.12160.10432.14784590641271824894
    Pipe \device\namedpipe\mojo.12160.10432.14784590641271824894
    Pipe \Device\NamedPipe\mojo.12160.10432.17750865881682446565
    Pipe \device\namedpipe\mojo.12160.10432.17750865881682446565
    Pipe \device\namedpipe\mojo.12160.10432.482491653255194459
    Pipe \Device\NamedPipe\mojo.12160.10432.482491653255194459
    Pipe \device\namedpipe\mojo.12160.10432.482491653255194459
    Pipe \Device\NamedPipe\mojo.12948.17924.10410809304882904038
    Pipe \device\namedpipe\mojo.12948.17924.10410809304882904038
    Pipe \Device\NamedPipe\mojo.12948.17924.1062489154901640744
    Pipe \device\namedpipe\mojo.12948.17924.1062489154901640744
    Pipe \device\namedpipe\mojo.12948.17924.12614361173559198608
    Pipe \Device\NamedPipe\mojo.12948.17924.12614361173559198608
    Pipe \device\namedpipe\mojo.12948.17924.12614361173559198608
    Pipe \device\namedpipe\mojo.12948.17924.4847221186462622960
    Pipe \Device\NamedPipe\mojo.12948.17924.4847221186462622960
    Pipe \device\namedpipe\mojo.12948.17924.4847221186462622960
    Pipe \device\namedpipe\mojo.12964.8252.17634180421636211354
    Pipe \Device\NamedPipe\mojo.12964.8252.17634180421636211354
    Pipe \device\namedpipe\mojo.12964.8252.17634180421636211354
    Pipe \device\namedpipe\mojo.12964.8252.4052688321124928104
    Pipe \Device\NamedPipe\mojo.12964.8252.4052688321124928104
    Pipe \device\namedpipe\mojo.12964.8252.4052688321124928104
    Pipe \device\namedpipe\mojo.12964.8252.4555342570279559204
    Pipe \Device\NamedPipe\mojo.12964.8252.4555342570279559204
    Pipe \device\namedpipe\mojo.12964.8252.4555342570279559204
    Pipe \device\namedpipe\mojo.12964.8252.456148726056794453
    Pipe \Device\NamedPipe\mojo.12964.8252.456148726056794453
    Pipe \device\namedpipe\mojo.12964.8252.456148726056794453
    Pipe \Device\NamedPipe\mojo.13776.10652.17003984107337072252
    Pipe \device\namedpipe\mojo.13776.10652.17003984107337072252
    Pipe \Device\NamedPipe\mojo.13776.10652.17003984107337072252
    Pipe \device\namedpipe\mojo.13776.10652.17003984107337072252
    Pipe \Device\NamedPipe\mojo.13776.10652.18232889605313912391
    Pipe \device\namedpipe\mojo.13776.10652.18232889605313912391
    Pipe \Device\NamedPipe\mojo.13776.10652.2807203366673926265
    Pipe \device\namedpipe\mojo.13776.10652.2807203366673926265
    Pipe \device\namedpipe\mojo.13776.10652.4960246691771101613
    Pipe \Device\NamedPipe\mojo.13776.10652.4960246691771101613
    Pipe \device\namedpipe\mojo.13776.10652.4960246691771101613
    Pipe \Device\NamedPipe\mojo.14940.16044.13132288211436893619
    Pipe \device\namedpipe\mojo.14940.16044.13132288211436893619
    Pipe \device\namedpipe\mojo.14940.16044.15631139698800430904
    Pipe \Device\NamedPipe\mojo.14940.16044.15631139698800430904
    Pipe \device\namedpipe\mojo.14940.16044.15631139698800430904
    Pipe \Device\NamedPipe\mojo.14940.16044.15631139698800430904
    Pipe \device\namedpipe\mojo.14940.16044.15631139698800430904
    Pipe \device\namedpipe\mojo.14940.16044.16178997040529071441
    Pipe \Device\NamedPipe\mojo.14940.16044.16178997040529071441
    Pipe \device\namedpipe\mojo.14940.16044.16178997040529071441
    Pipe \device\namedpipe\mojo.14940.16044.18025766026960492925
    Pipe \Device\NamedPipe\mojo.14940.16044.18025766026960492925
    Pipe \device\namedpipe\mojo.14940.16044.18025766026960492925
    Pipe \Device\NamedPipe\mojo.15684.17836.10185898677142337230
    Pipe \device\namedpipe\mojo.15684.17836.10185898677142337230
    Pipe \Device\NamedPipe\mojo.15684.17836.10185898677142337230
    Pipe \device\namedpipe\mojo.15684.17836.10185898677142337230
    Pipe \Device\NamedPipe\mojo.15684.17836.14082325226026419284
    Pipe \device\namedpipe\mojo.15684.17836.14082325226026419284
    Pipe \device\namedpipe\mojo.15684.17836.3038450527582405771
    Pipe \Device\NamedPipe\mojo.15684.17836.3038450527582405771
    Pipe \device\namedpipe\mojo.15684.17836.3038450527582405771
    Pipe \device\namedpipe\mojo.15684.17836.8288591048334420547
    Pipe \Device\NamedPipe\mojo.15684.17836.8288591048334420547
    Pipe \device\namedpipe\mojo.15684.17836.8288591048334420547
    Pipe \Device\NamedPipe\mojo.16520.1204.11294162983845663483
    Pipe \device\namedpipe\mojo.16520.1204.11294162983845663483
    Pipe \Device\NamedPipe\mojo.16520.1204.18050169167110578450
    Pipe \device\namedpipe\mojo.16520.1204.18050169167110578450
    Pipe \Device\NamedPipe\mojo.16520.1204.4523883852618297668
    Pipe \device\namedpipe\mojo.16520.1204.4523883852618297668
    Pipe \device\namedpipe\mojo.16520.1204.9376045574703566977
    Pipe \Device\NamedPipe\mojo.16520.1204.9376045574703566977
    Pipe \device\namedpipe\mojo.16520.1204.9376045574703566977
    Pipe \Device\NamedPipe\mojo.16596.11240.4901047682960134101
    Pipe \device\namedpipe\mojo.16596.11240.4901047682960134101
    Pipe \Device\NamedPipe\mojo.16596.11240.6220930088069679510
    Pipe \device\namedpipe\mojo.16596.11240.6220930088069679510
    Pipe \Device\NamedPipe\mojo.16596.11240.6605342278981820952
    Pipe \device\namedpipe\mojo.16596.11240.6605342278981820952
    Pipe \device\namedpipe\mojo.16596.11240.9916511279916956940
    Pipe \Device\NamedPipe\mojo.16596.11240.9916511279916956940
    Pipe \device\namedpipe\mojo.16596.11240.9916511279916956940
    Pipe \device\namedpipe\mojo.17236.13032.12247852663952998608
    Pipe \Device\NamedPipe\mojo.17236.13032.12247852663952998608
    Pipe \device\namedpipe\mojo.17236.13032.12247852663952998608
    Pipe \Device\NamedPipe\mojo.17236.13032.14155128638421282524
    Pipe \device\namedpipe\mojo.17236.13032.14155128638421282524
    Pipe \Device\NamedPipe\mojo.17236.13032.14155128638421282524
    Pipe \device\namedpipe\mojo.17236.13032.14155128638421282524
    Pipe \Device\NamedPipe\mojo.17236.13032.7465147158687519394
    Pipe \device\namedpipe\mojo.17236.13032.7465147158687519394
    Pipe \Device\NamedPipe\mojo.17236.13032.7465147158687519394
    Pipe \device\namedpipe\mojo.17236.13032.7465147158687519394
    Pipe \Device\NamedPipe\mojo.17236.13032.8998185834973087494
    Pipe \device\namedpipe\mojo.17236.13032.8998185834973087494
    Pipe \device\namedpipe\mojo.19368.18280.10795854913492140142
    Pipe \Device\NamedPipe\mojo.19368.18280.10795854913492140142
    Pipe \device\namedpipe\mojo.19368.18280.10795854913492140142
    Pipe \Device\NamedPipe\mojo.19368.18280.5705311716642347390
    Pipe \device\namedpipe\mojo.19368.18280.5705311716642347390
    Pipe \Device\NamedPipe\mojo.19368.18280.8237938551152338178
    Pipe \device\namedpipe\mojo.19368.18280.8237938551152338178
    Pipe \Device\NamedPipe\mojo.19368.18280.9727891093409050893
    Pipe \device\namedpipe\mojo.19368.18280.9727891093409050893
    Pipe \device\namedpipe\mojo.2632.17784.11633053297054578048
    Pipe \Device\NamedPipe\mojo.2632.17784.11633053297054578048
    Pipe \device\namedpipe\mojo.2632.17784.11633053297054578048
    Pipe \Device\NamedPipe\mojo.2632.17784.16370264786364656479
    Pipe \device\namedpipe\mojo.2632.17784.16370264786364656479
    Pipe \device\namedpipe\mojo.2632.17784.1641073949282068804
    Pipe \Device\NamedPipe\mojo.2632.17784.1641073949282068804
    Pipe \device\namedpipe\mojo.2632.17784.1641073949282068804
    Pipe \device\namedpipe\mojo.2632.17784.5993232913677386421
    Pipe \Device\NamedPipe\mojo.2632.17784.5993232913677386421
    Pipe \device\namedpipe\mojo.2632.17784.5993232913677386421
    Pipe \Device\NamedPipe\mojo.5064.17664.4470939844578272208
    Pipe \device\namedpipe\mojo.5064.17664.4470939844578272208
    Pipe \Device\NamedPipe\mojo.5064.17664.7967258679496499950
    Pipe \device\namedpipe\mojo.5064.17664.7967258679496499950
    Pipe \device\namedpipe\mojo.5064.17664.8988140993231091546
    Pipe \Device\NamedPipe\mojo.5064.17664.8988140993231091546
    Pipe \device\namedpipe\mojo.5064.17664.8988140993231091546
    Pipe \device\namedpipe\mojo.5064.17664.9124264204061717465
    Pipe \Device\NamedPipe\mojo.5064.17664.9124264204061717465
    Pipe \device\namedpipe\mojo.5064.17664.9124264204061717465
    Pipe \Device\NamedPipe\mojo.584.16312.11010672641583510497
    Pipe \device\namedpipe\mojo.584.16312.11010672641583510497
    Pipe \Device\NamedPipe\mojo.584.16312.11010672641583510497
    Pipe \device\namedpipe\mojo.584.16312.11010672641583510497
    Pipe \device\namedpipe\mojo.584.16312.14289884423449697078
    Pipe \Device\NamedPipe\mojo.584.16312.14289884423449697078
    Pipe \device\namedpipe\mojo.584.16312.14289884423449697078
    Pipe \device\namedpipe\mojo.584.16312.15740838107610473341
    Pipe \Device\NamedPipe\mojo.584.16312.15740838107610473341
    Pipe \device\namedpipe\mojo.584.16312.15740838107610473341
    Pipe \Device\NamedPipe\mojo.584.16312.5461122773157830310
    Pipe \device\namedpipe\mojo.584.16312.5461122773157830310
    Pipe \Device\NamedPipe\mojo.584.16312.5607204109241919029
    Pipe \device\namedpipe\mojo.584.16312.5607204109241919029
    Pipe \Device\NamedPipe\mojo.584.16312.5607204109241919029
    Pipe \device\namedpipe\mojo.584.16312.5607204109241919029
    Pipe \Device\NamedPipe\mojo.584.16312.5893896366122634077
    Pipe \device\namedpipe\mojo.584.16312.5893896366122634077
    Pipe \Device\NamedPipe\mojo.584.16312.7672462877415202173
    Pipe \device\namedpipe\mojo.584.16312.7672462877415202173
    Pipe \Device\NamedPipe\mojo.584.16312.9216302012333995953
    Pipe \device\namedpipe\mojo.584.16312.9216302012333995953
    Pipe \device\namedpipe\mojo.584.16312.9841064391642920069
    Pipe \Device\NamedPipe\mojo.584.16312.9841064391642920069
    Pipe \device\namedpipe\mojo.584.16312.9841064391642920069
    Pipe \Device\NamedPipe\mojo.584.1880.10278622075442382322
    Pipe \device\namedpipe\mojo.584.1880.10278622075442382322
    Pipe \Device\NamedPipe\mojo.584.1880.10278622075442382322
    Pipe \device\namedpipe\mojo.584.1880.10278622075442382322
    Pipe \device\namedpipe\mojo.584.1880.10608066376950363740
    Pipe \Device\NamedPipe\mojo.584.1880.10608066376950363740
    Pipe \device\namedpipe\mojo.584.1880.10608066376950363740
    Pipe \Device\NamedPipe\mojo.584.1880.11529586676028470938
    Pipe \device\namedpipe\mojo.584.1880.11529586676028470938
    Pipe \Device\NamedPipe\mojo.584.1880.11529586676028470938
    Pipe \device\namedpipe\mojo.584.1880.11529586676028470938
    Pipe \Device\NamedPipe\mojo.584.1880.11608731966468417766
    Pipe \device\namedpipe\mojo.584.1880.11608731966468417766
    Pipe \Device\NamedPipe\mojo.584.1880.11608731966468417766
    Pipe \device\namedpipe\mojo.584.1880.11608731966468417766
    Pipe \device\namedpipe\mojo.584.1880.12180758762909950152
    Pipe \Device\NamedPipe\mojo.584.1880.12180758762909950152
    Pipe \device\namedpipe\mojo.584.1880.12180758762909950152
    Pipe \device\namedpipe\mojo.584.1880.12767185258318163703
    Pipe \Device\NamedPipe\mojo.584.1880.12767185258318163703
    Pipe \device\namedpipe\mojo.584.1880.12767185258318163703
    Pipe \Device\NamedPipe\mojo.584.1880.12921851669608502014
    Pipe \device\namedpipe\mojo.584.1880.12921851669608502014
    Pipe \device\namedpipe\mojo.584.1880.13296395152876489755
    Pipe \Device\NamedPipe\mojo.584.1880.13296395152876489755
    Pipe \device\namedpipe\mojo.584.1880.13296395152876489755
    Pipe \Device\NamedPipe\mojo.584.1880.14109712111773538836
    Pipe \device\namedpipe\mojo.584.1880.14109712111773538836
    Pipe \Device\NamedPipe\mojo.584.1880.14109712111773538836
    Pipe \device\namedpipe\mojo.584.1880.14109712111773538836
    Pipe \Device\NamedPipe\mojo.584.1880.14607088351741517552
    Pipe \device\namedpipe\mojo.584.1880.14607088351741517552
    Pipe \Device\NamedPipe\mojo.584.1880.14607088351741517552
    Pipe \device\namedpipe\mojo.584.1880.14607088351741517552
    Pipe \Device\NamedPipe\mojo.584.1880.14705433880605040748
    Pipe \device\namedpipe\mojo.584.1880.14705433880605040748
    Pipe \Device\NamedPipe\mojo.584.1880.14705433880605040748
    Pipe \device\namedpipe\mojo.584.1880.14705433880605040748
    Pipe \device\namedpipe\mojo.584.1880.14815472415409162645
    Pipe \Device\NamedPipe\mojo.584.1880.14815472415409162645
    Pipe \device\namedpipe\mojo.584.1880.14815472415409162645
    Pipe \Device\NamedPipe\mojo.584.1880.15355817269061724335
    Pipe \device\namedpipe\mojo.584.1880.15355817269061724335
    Pipe \Device\NamedPipe\mojo.584.1880.15814353020729261578
    Pipe \device\namedpipe\mojo.584.1880.15814353020729261578
    Pipe \Device\NamedPipe\mojo.584.1880.15814353020729261578
    Pipe \device\namedpipe\mojo.584.1880.15814353020729261578
    Pipe \Device\NamedPipe\mojo.584.1880.15954682991269340231
    Pipe \device\namedpipe\mojo.584.1880.15954682991269340231
    Pipe \Device\NamedPipe\mojo.584.1880.15954682991269340231
    Pipe \device\namedpipe\mojo.584.1880.15954682991269340231
    Pipe \Device\NamedPipe\mojo.584.1880.1616538591832078325
    Pipe \device\namedpipe\mojo.584.1880.1616538591832078325
    Pipe \Device\NamedPipe\mojo.584.1880.17465149689674445008
    Pipe \device\namedpipe\mojo.584.1880.17465149689674445008
    Pipe \Device\NamedPipe\mojo.584.1880.17465149689674445008
    Pipe \device\namedpipe\mojo.584.1880.17465149689674445008
    Pipe \Device\NamedPipe\mojo.584.1880.17625883143474529568
    Pipe \device\namedpipe\mojo.584.1880.17625883143474529568
    Pipe \device\namedpipe\mojo.584.1880.17757895813704524670
    Pipe \Device\NamedPipe\mojo.584.1880.17757895813704524670
    Pipe \device\namedpipe\mojo.584.1880.17757895813704524670
    Pipe \device\namedpipe\mojo.584.1880.2003063005696705779
    Pipe \Device\NamedPipe\mojo.584.1880.2003063005696705779
    Pipe \device\namedpipe\mojo.584.1880.2003063005696705779
    Pipe \Device\NamedPipe\mojo.584.1880.2025680345903791388
    Pipe \device\namedpipe\mojo.584.1880.2025680345903791388
    Pipe \device\namedpipe\mojo.584.1880.2572498508793452597
    Pipe \Device\NamedPipe\mojo.584.1880.2572498508793452597
    Pipe \device\namedpipe\mojo.584.1880.2572498508793452597
    Pipe \device\namedpipe\mojo.584.1880.3300553687574619398
    Pipe \Device\NamedPipe\mojo.584.1880.3300553687574619398
    Pipe \device\namedpipe\mojo.584.1880.3300553687574619398
    Pipe \Device\NamedPipe\mojo.584.1880.3778036673233760230
    Pipe \device\namedpipe\mojo.584.1880.3778036673233760230
    Pipe \device\namedpipe\mojo.584.1880.4686874616742934486
    Pipe \Device\NamedPipe\mojo.584.1880.4686874616742934486
    Pipe \device\namedpipe\mojo.584.1880.4686874616742934486
    Pipe \device\namedpipe\mojo.584.1880.5119364574470122599
    Pipe \Device\NamedPipe\mojo.584.1880.5119364574470122599
    Pipe \device\namedpipe\mojo.584.1880.5119364574470122599
    Pipe \device\namedpipe\mojo.584.1880.5313822581902294256
    Pipe \Device\NamedPipe\mojo.584.1880.5313822581902294256
    Pipe \device\namedpipe\mojo.584.1880.5313822581902294256
    Pipe \device\namedpipe\mojo.584.1880.5654896879362809757
    Pipe \Device\NamedPipe\mojo.584.1880.5654896879362809757
    Pipe \device\namedpipe\mojo.584.1880.5654896879362809757
    Pipe \Device\NamedPipe\mojo.584.1880.5891948646949827296
    Pipe \device\namedpipe\mojo.584.1880.5891948646949827296
    Pipe \Device\NamedPipe\mojo.584.1880.6437769928892862569
    Pipe \device\namedpipe\mojo.584.1880.6437769928892862569
    Pipe \device\namedpipe\mojo.584.1880.7298666214069642178
    Pipe \Device\NamedPipe\mojo.584.1880.7298666214069642178
    Pipe \device\namedpipe\mojo.584.1880.7298666214069642178
    Pipe \Device\NamedPipe\mojo.584.1880.7650828024645548239
    Pipe \device\namedpipe\mojo.584.1880.7650828024645548239
    Pipe \Device\NamedPipe\mojo.584.1880.7754301412962307679
    Pipe \device\namedpipe\mojo.584.1880.7754301412962307679
    Pipe \device\namedpipe\mojo.584.1880.7898622207833273881
    Pipe \Device\NamedPipe\mojo.584.1880.7898622207833273881
    Pipe \device\namedpipe\mojo.584.1880.7898622207833273881
    Pipe \Device\NamedPipe\mojo.584.1880.8033051255755563136
    Pipe \device\namedpipe\mojo.584.1880.8033051255755563136
    Pipe \device\namedpipe\mojo.584.1880.8122696387639860699
    Pipe \Device\NamedPipe\mojo.584.1880.8122696387639860699
    Pipe \device\namedpipe\mojo.584.1880.8122696387639860699
    Pipe \Device\NamedPipe\mojo.584.1880.8139684190874108070
    Pipe \device\namedpipe\mojo.584.1880.8139684190874108070
    Pipe \Device\NamedPipe\mojo.584.1880.8139684190874108070
    Pipe \device\namedpipe\mojo.584.1880.8139684190874108070
    Pipe \device\namedpipe\mojo.584.1880.8501186959996630511
    Pipe \Device\NamedPipe\mojo.584.1880.8501186959996630511
    Pipe \device\namedpipe\mojo.584.1880.8501186959996630511
    Pipe \Device\NamedPipe\mojo.584.1880.8922229839384067312
    Pipe \device\namedpipe\mojo.584.1880.8922229839384067312
    Pipe \Device\NamedPipe\mojo.584.1880.8922229839384067312
    Pipe \device\namedpipe\mojo.584.1880.8922229839384067312
    Pipe \Device\NamedPipe\mojo.584.1880.903923066749058055
    Pipe \device\namedpipe\mojo.584.1880.903923066749058055
    Pipe \device\namedpipe\mojo.584.1880.9361288724698407404
    Pipe \Device\NamedPipe\mojo.584.1880.9361288724698407404
    Pipe \device\namedpipe\mojo.584.1880.9361288724698407404
    Pipe \Device\NamedPipe\mojo.584.1880.9392551692087791814
    Pipe \device\namedpipe\mojo.584.1880.9392551692087791814
    Pipe \Device\NamedPipe\mojo.584.1880.9452260455829141231
    Pipe \device\namedpipe\mojo.584.1880.9452260455829141231
    Pipe \Device\NamedPipe\mojo.584.1880.9452260455829141231
    Pipe \device\namedpipe\mojo.584.1880.9452260455829141231
    Pipe \Device\NamedPipe\mojo.584.1880.9908442329020462732
    Pipe \device\namedpipe\mojo.584.1880.9908442329020462732
    Pipe \Device\NamedPipe\mojo.584.1880.9995654469555169999
    Pipe \device\namedpipe\mojo.584.1880.9995654469555169999
    Pipe \Device\NamedPipe\mojo.584.1880.9995654469555169999
    Pipe \device\namedpipe\mojo.584.1880.9995654469555169999
    Pipe \Device\NamedPipe\mojo.6956.12276.10111745853089884852
    Pipe \device\namedpipe\mojo.6956.12276.10111745853089884852
    Pipe \Device\NamedPipe\mojo.6956.12276.10111745853089884852
    Pipe \device\namedpipe\mojo.6956.12276.10111745853089884852
    Pipe \Device\NamedPipe\mojo.6956.12276.13086807883670626620
    Pipe \device\namedpipe\mojo.6956.12276.13086807883670626620
    Pipe \Device\NamedPipe\mojo.6956.12276.5250939622044834268
    Pipe \device\namedpipe\mojo.6956.12276.5250939622044834268
    Pipe \Device\NamedPipe\mojo.6956.12276.621594124165894529
    Pipe \device\namedpipe\mojo.6956.12276.621594124165894529
    Pipe \Device\NamedPipe\mojo.6956.12276.621594124165894529
    Pipe \device\namedpipe\mojo.6956.12276.621594124165894529
    Pipe \Device\NamedPipe\mojo.7312.14216.12299631353930416298
    Pipe \device\namedpipe\mojo.7312.14216.12299631353930416298
    Pipe \Device\NamedPipe\mojo.7312.14216.17821125504386390515
    Pipe \device\namedpipe\mojo.7312.14216.17821125504386390515
    Pipe \Device\NamedPipe\mojo.7312.14216.17821125504386390515
    Pipe \device\namedpipe\mojo.7312.14216.17821125504386390515
    Pipe \Device\NamedPipe\mojo.7312.14216.7386587308447989194
    Pipe \device\namedpipe\mojo.7312.14216.7386587308447989194
    Pipe \Device\NamedPipe\mojo.7312.14216.7386587308447989194
    Pipe \device\namedpipe\mojo.7312.14216.7386587308447989194
    Pipe \Device\NamedPipe\mojo.7312.14216.9191053494151748223
    Pipe \device\namedpipe\mojo.7312.14216.9191053494151748223
    Pipe \device\namedpipe\mojo.816.17728.16177537624309263119
    Pipe \Device\NamedPipe\mojo.816.17728.16177537624309263119
    Pipe \device\namedpipe\mojo.816.17728.16177537624309263119
    Pipe \Device\NamedPipe\mojo.816.17728.7248763501923473704
    Pipe \device\namedpipe\mojo.816.17728.7248763501923473704
    Pipe \Device\NamedPipe\mojo.816.17728.9003953574490058308
    Pipe \device\namedpipe\mojo.816.17728.9003953574490058308
    Pipe \Device\NamedPipe\mojo.816.17728.9642534563299638168
    Pipe \device\namedpipe\mojo.816.17728.9642534563299638168
    Pipe \device\namedpipe\wkssvc
    Pipe \Device\Ndis
    Pipe \Device\NDMP34
    Pipe O \Device\Afd
    Pipe O \Device\NamedPipe
    Pipe O \Device\NamedPipe\
    Pipe O \Device\NetBT_Tcpip_{3524A2C6-F05D-4707-A542-2EBA696D237A}
    Pipe O \Device\NetBT_Tcpip_{365D28CB-51F4-4F40-918A-03A562529439}
    Pipe O \Device\NetBT_Tcpip_{3E0D39A7-C4CD-4311-B20E-EA04CD84A414}
    Pipe O \Device\NetBT_Tcpip_{591DE166-4EB4-42A6-8CEA-F82F5C547138}
    Pipe O \Device\NetBT_Tcpip_{6FD050B5-D8B1-49B2-945C-DFE6BCB1F391}
    Pipe O \Device\NetBT_Tcpip_{73AB9643-09C9-4EC5-AA9C-007AED6BA2B3}
    Pipe O \Device\NetBT_Tcpip_{7BF07D57-AE10-4C71-8C44-FDC00A3D8FFB}
    Pipe O \Device\Nsi
    WinCls -------------------------------
    WinCls Chrome_MessageWindow
    WinCls O Shell_TrayWnd
    WinCls X ApplicationManager_DesktopShellWindow
    WinCls X Chrome_MessageWindow

  • Hi Christoph,

    I re-tested using Thunderbird 60.8, Win 10 1809 x64 , Sbie 5.31.2 and Chrome 75, and I cannot reproduce the problem. I even set the same Sandboxie templates that you are using.

    Can I please get the exact program versions that you are running at this point? (Sbie, Thunderbird and Chrome) .

    Also confirm that if you double click on Chrome's icon it does open Sandboxed? (Instead of invoking it via another program).

    If you use a new Chrome profile, vanilla, does the issue persist?

    If it does, let's have you narrow down the Res. Acc. Mon to Thunderbird and Chrome so I can compare againts what I get:
    Delete the contents of your Sandbox
    Ensure no Sandboxed apps are running
    Launch Res. Acc. Mon
    Repro the issue using Thunderbird - once.
    Immediately copy the output and paste it here.

    Thank you,

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • Update 2: OK, the bug is occuring again... The "SBIE2101 ConnectPort" error appears everytime I start Chrome. Also the links work when Chrome is not running while I click them. A new instance is launched in that case. But when Chrome is running, nothing happens when I click a link (except for Microsoft Apps)...

    Update: Just as I'm writing this post, the bug suddenly doesn't occur anymore... I only killed the processes which I mentioned below a few times manually because I tried to find out if the bug has something to do with them. But currently I'm not able to reproduce it anymore... This is strange. I'll watch out for it and report it here when it occurs again.

     

    The post I was about to write when the bug occured:


     


    Hi,

    I've got the same issue like Christoph with the same behaviour.
    I also have the issue with other applications like for example Origin (when I try to open the online help or forums from the menu).

    An interesting thing I found out is that the links open in Chrome like they should if I click on them for example in the Microsoft News App.
    So not every application seems to be affected.

    When Chrome is not running and I click a link it will open Chrome like it should.

    Something else I noticed is, that if I close Chrome, some processes keep running in the Sandbox:

    - SandboxieRpcSs.exe
    - SandboxieDcomLaunch.exe
    - SandboxieCrypto.exe
    - RuntimeBroker.exe
    - CompPkgSrv.exe

    With Firefox on the other hand all processes are closed after I close Firefox.

    I'm using:

    - Windows 10 Education, Version 1903, Build 18362.239
    - Chrome Version 75.0.3770.142 (Official Build) (64-Bit)
    - Thunderbird Version 60.8.0 (32-Bit) / Origin Version 10.5.41.27263 - 0 (32-Bit)


    I don't know if this has something to do with this bug, but when I start Chrome and the previously called processes are still running, I get these Sandboxie errors (if I kill the processes manually before, the errors won't occur):

    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1
    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1
    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1

  • Hi snowball one,

    Glad to hear things are fine now, but If the problems happen again, please provide all the required info so that I can test it:

    How to report problems with Sandboxie

    Thanks! 

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • Problem is back.

      

    1- Sandboxie and Windows version (For example Sandboxie 5.30 , Windows 10 x64 bit 1809)

    - Sandboxie Beta 5.31.2
    - Windows 10 Education, Version 1903, Build 18362.239

     

    2 - Affected applications version (if using a browser, include any extensions as well)

    - Chrome Version 75.0.3770.142 (Official Build) (64-Bit)

    Chrome Extensions (active):

    - dict-cc 1.6.89
    - Google Translator 2.0.7
    - uBlock Origin 1.21.6

    - Thunderbird 60.8.0 (32-Bit)

    - Origin Version 10.5.43.28287 - 0

    - VirtualBox 5.2.26

    (just a few examples)

     

    3 - List any antivirus installed, and their version.

    Windows Defender (latest updates)

     

    4 - Steps to reproduce the issue.

    While sandboxed Chrome is running, do the following:

    - Thunderbird: Click on link in Mail or open the Online Help (press F1 or use the menu)
    - Origin:: Open the Online Help (press F1 or use the menu)
    - VirtualBox: Menu -> Help -> VirtualBox Website

    Mouse cursor shows the loading spinner shortly and then nothing happens anymore.

     

    5 - Does it occur in a new sandbox with default settings?

    When I run Chrome in a new sandbox and open a link (like explained in 4.), it will open BUT it will start a new instance of Chrome in the DefaultBox and opens in there and NOT in the already running sandbox.
    The newly created Chrome will have an extra icon in the taskbar instead of using the existing one which is used when Chrome is started normally.
    In this instance of Chrome any other clicked link will open properly.

     

    6 - Full error message and screenshots of it if applicable.

    SBIE2101 ConnectPort (C0000022) access=001F0000 initialized=1

    appears 3 times, when opening Chrome in the Sandbox.

  • Hi snowball,

    I tested Thunderbird and pressing F1, Chrome opened fine in the Sandbox where is forced to run.

    Are you running Thunderbird outside Sandboxie? If so, and you have Chrome forced in a default Sandbox, then Chrome will be launched there (default forced box) instead of in a different box, regardless of whether Chrome is already running in a non forced Sandbox. That is the expected behavior (the SBIE messages are not, however).

    Can I please get a copy of your configuration file? Configure --> Edit configuration
    Copy paste the contents here

    Thanks!

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • Ok, here are my settings:

    (I have a Thunderbird Sandbox, but I don't use it.)

    Have you tried to start Chrome in the Sandbox first and then open a link from Thunderbird as well?

     


     


    [GlobalSettings]

    Template=WindowsRasMan
    Template=Logitech_G15_Keyboard
    Template=7zipShellEx
    Template=OfficeClickToRun
    Template=WindowsLive
    Template=nVidia_Stereoscopic3D
    Template=OfficeLicensing
    ActivationPrompt=n
    TemplateReject=Avira_Antivirus

    [DefaultBox]

    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    Enabled=y
    CopyLimitKb=818178
    ForceProcess=firefox.exe
    ForceProcess=chrome.exe

    [UserSettings_25500394]

    SbieCtrl_UserName=snowball-pc
    SbieCtrl_NextUpdateCheck=1564750497
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_ShowWelcome=n
    SbieCtrl_WindowCoords=881,174,1039,698
    SbieCtrl_ActiveView=40021
    SbieCtrl_ProcessViewColumnWidths=250,70,300
    SbieCtrl_AutoApplySettings=n
    SbieCtrl_RecoverTarget=D:\snowball\Downloads\SandboxieDLs
    SbieCtrl_SaveRecoverTargets=y
    SbieCtrl_ExplorerNotify=n
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_BoxExpandedView=DefaultBox,firefox_portable,mi2,NewTestBox,TestBox1,Thunderbird,tor1

    [TestBox]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl

    [USB_Box]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    CopyLimitKb=357378

    [ChromePortable]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl

    [Thunderbird]

    ConfigLevel=7
    AutoRecover=y
    Template=AutoRecoverIgnore
    Template=Firefox_Phishing_DirectAccess
    Template=Chrome_Phishing_DirectAccess
    Template=LingerPrograms
    Template=BlockPorts
    Template=WindowsFontCache
    RecoverFolder=%Desktop%
    RecoverFolder=%Favorites%
    RecoverFolder=%Personal%
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    BorderColor=#00FFFF,ttl
    Enabled=y

    [test1]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=Thunderbird
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    CopyLimitKb=359426

    [tor1]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    CopyLimitKb=357378
    ForceProcess=firefoxportable.exe

    [tester]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    CopyLimitKb=349188

    [mi2]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    CopyLimitKb=349186

    [firefox_portable]

    ConfigLevel=7
    AutoRecover=y
    Template=AutoRecoverIgnore
    Template=Firefox_Phishing_DirectAccess
    Template=Chrome_Phishing_DirectAccess
    Template=LingerPrograms
    Template=BlockPorts
    Template=WindowsFontCache
    RecoverFolder=%Desktop%
    RecoverFolder=%Favorites%
    RecoverFolder=%Personal%
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    BorderColor=#00FFFF,ttl
    Enabled=y
    CopyLimitKb=581634
    ForceProcess=chrome.exe
    ForceProcess=firefox.exe

    [NewTestBox]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl

    [TestBox1]

    Enabled=y
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl