=== Verbose logging started: 20-12-2022 11:23:05 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\Windows\System32\msiexec.exe ===
MSI (c) (F0:7C) [11:23:05:716]: Font created. Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg
MSI (c) (F0:7C) [11:23:05:717]: Font created. Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg
MSI (c) (F0:98) [11:23:05:733]: Resetting cached policy values
MSI (c) (F0:98) [11:23:05:733]: Machine policy value 'Debug' is 0
MSI (c) (F0:98) [11:23:05:733]: ******* RunEngine:
******* Product: C:\Users\DREAMWORLD\Downloads\vanta.msi
******* Action: ******* CommandLine: **********
MSI (c) (F0:98) [11:23:05:735]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (F0:98) [11:23:05:737]: Access database with Impersonation
MSI (c) (F0:98) [11:23:05:738]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\DREAMWORLD\Downloads\vanta.msi' against software restriction policy
MSI (c) (F0:98) [11:23:05:739]: SOFTWARE RESTRICTION POLICY: C:\Users\DREAMWORLD\Downloads\vanta.msi has a digital signature
MSI (c) (F0:98) [11:23:05:889]: SOFTWARE RESTRICTION POLICY: C:\Users\DREAMWORLD\Downloads\vanta.msi is permitted to run at the 'unrestricted' authorization level.
MSI (c) (F0:98) [11:23:05:894]: Cloaking enabled.
MSI (c) (F0:98) [11:23:05:894]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (F0:98) [11:23:05:898]: End dialog not enabled
MSI (c) (F0:98) [11:23:05:899]: Original package ==> C:\Users\DREAMWORLD\Downloads\vanta.msi
MSI (c) (F0:98) [11:23:05:900]: Package we're running from ==> C:\Users\DREAMWORLD\Downloads\vanta.msi
MSI (c) (F0:98) [11:23:05:900]: APPCOMPAT: Compatibility mode property overrides found.
MSI (c) (F0:98) [11:23:05:901]: APPCOMPAT: looking for appcompat database entry with ProductCode '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'.
MSI (c) (F0:98) [11:23:05:902]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (F0:98) [11:23:05:907]: MSCOREE not loaded loading copy from system32
MSI (c) (F0:98) [11:23:05:911]: Machine policy value 'TransformsSecure' is 0
MSI (c) (F0:98) [11:23:05:912]: User policy value 'TransformsAtSource' is 0
MSI (c) (F0:98) [11:23:05:912]: Machine policy value 'DisablePatch' is 0
MSI (c) (F0:98) [11:23:05:913]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (F0:98) [11:23:05:914]: Machine policy value 'DisableMsi' is 0
MSI (c) (F0:98) [11:23:05:914]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (F0:98) [11:23:05:915]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (F0:98) [11:23:05:915]: Running product '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}' with user privileges: It's not assigned.
MSI (c) (F0:98) [11:23:05:916]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (F0:98) [11:23:05:916]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (F0:98) [11:23:05:917]: APPCOMPAT: looking for appcompat database entry with ProductCode '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'.
MSI (c) (F0:98) [11:23:05:917]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (F0:98) [11:23:05:918]: Transforms are not secure.
MSI (c) (F0:98) [11:23:05:918]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\DREAMW~1\AppData\Local\Temp\MSIdca57.LOG'.
MSI (c) (F0:98) [11:23:05:918]: Command Line: CURRENTDIRECTORY=C:\Users\DREAMWORLD\Downloads CLIENTUILEVEL=0 CLIENTPROCESSID=12016 MSI (c) (F0:98) [11:23:05:918]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{23C3EE9F-DAD3-4B50-B8B8-C643F61F7F9F}'.
MSI (c) (F0:98) [11:23:05:919]: Product Code passed to Engine.Initialize: ''
MSI (c) (F0:98) [11:23:05:919]: Product Code from property table before transforms: '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'
MSI (c) (F0:98) [11:23:05:920]: Product Code from property table after transforms: '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'
MSI (c) (F0:98) [11:23:05:920]: Product not registered: beginning first-time install
MSI (c) (F0:98) [11:23:05:921]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (F0:98) [11:23:05:921]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (F0:98) [11:23:05:922]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (F0:98) [11:23:05:922]: Adding new sources is allowed.
MSI (c) (F0:98) [11:23:05:923]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (F0:98) [11:23:05:924]: Package name extracted from package path: 'vanta.msi'
MSI (c) (F0:98) [11:23:05:925]: Package to be registered: 'vanta.msi'
MSI (c) (F0:98) [11:23:05:925]: Note: 1: 2262 2: Error 3: -2147287038 MSI (c) (F0:98) [11:23:05:926]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (F0:98) [11:23:05:927]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (F0:98) [11:23:05:927]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (F0:98) [11:23:05:928]: Running product '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}' with user privileges: It's not assigned.
MSI (c) (F0:98) [11:23:05:929]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\DREAMWORLD\Downloads'.
MSI (c) (F0:98) [11:23:05:929]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (c) (F0:98) [11:23:05:930]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '12016'.
MSI (c) (F0:98) [11:23:05:930]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (c) (F0:98) [11:23:05:930]: TRANSFORMS property is now: MSI (c) (F0:98) [11:23:05:931]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '100'.
MSI (c) (F0:98) [11:23:05:932]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming
MSI (c) (F0:98) [11:23:05:932]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Favorites
MSI (c) (F0:98) [11:23:05:933]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (F0:98) [11:23:05:934]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Documents
MSI (c) (F0:98) [11:23:05:934]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (F0:98) [11:23:05:934]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (F0:98) [11:23:05:935]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (F0:98) [11:23:05:935]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (F0:98) [11:23:05:936]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (F0:98) [11:23:05:937]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Local
MSI (c) (F0:98) [11:23:05:937]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Pictures
MSI (c) (F0:98) [11:23:05:938]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (F0:98) [11:23:05:938]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (F0:98) [11:23:05:939]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (F0:98) [11:23:05:940]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (F0:98) [11:23:05:940]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (F0:98) [11:23:05:941]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (F0:98) [11:23:05:941]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (F0:98) [11:23:05:941]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (F0:98) [11:23:05:942]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (F0:98) [11:23:05:942]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Desktop
MSI (c) (F0:98) [11:23:05:943]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (F0:98) [11:23:05:944]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (F0:98) [11:23:05:945]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (F0:98) [11:23:05:951]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (F0:98) [11:23:05:951]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (c) (F0:98) [11:23:05:953]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (F0:98) [11:23:05:953]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (F0:98) [11:23:05:953]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'DREAMWORLD'.
MSI (c) (F0:98) [11:23:05:954]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (F0:98) [11:23:05:955]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Users\DREAMWORLD\Downloads\vanta.msi'.
MSI (c) (F0:98) [11:23:05:955]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\DREAMWORLD\Downloads\vanta.msi'.
MSI (c) (F0:98) [11:23:05:956]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (F0:98) [11:23:05:956]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\DREAMWORLD\Downloads\'.
MSI (c) (F0:98) [11:23:05:957]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Users\DREAMWORLD\Downloads\'.
MSI (c) (F0:7C) [11:23:05:958]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '5.00'.
=== Logging started: 20-12-2022 11:23:05 ===
MSI (c) (F0:98) [11:23:05:969]: Note: 1: 2205 2: 3: PatchPackage MSI (c) (F0:98) [11:23:05:969]: Machine policy value 'DisableRollback' is 0
MSI (c) (F0:98) [11:23:05:970]: User policy value 'DisableRollback' is 0
MSI (c) (F0:98) [11:23:05:970]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (c) (F0:98) [11:23:05:975]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (c) (F0:98) [11:23:05:975]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (c) (F0:98) [11:23:05:977]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (c) (F0:98) [11:23:05:978]: Doing action: INSTALL
Action start 11:23:05: INSTALL.
MSI (c) (F0:98) [11:23:05:979]: UI Sequence table 'InstallUISequence' is present and populated.
MSI (c) (F0:98) [11:23:05:980]: Running UISequence
MSI (c) (F0:98) [11:23:05:980]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (c) (F0:98) [11:23:05:981]: Doing action: FindRelatedProducts
Action start 11:23:05: FindRelatedProducts.
Action ended 11:23:05: FindRelatedProducts. Return value 1.
MSI (c) (F0:98) [11:23:05:983]: Doing action: PrepareDlg
Action start 11:23:05: PrepareDlg.
MSI (c) (F0:7C) [11:23:05:987]: Note: 1: 2262 2: Error 3: -2147287038 Info 2898.For WixUI_Font_Normal textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
MSI (c) (F0:7C) [11:23:05:990]: Note: 1: 2262 2: Error 3: -2147287038 Info 2898.For WixUI_Font_Bigger textstyle, the system created a 'Tahoma' font, in 0 character set, of 19 pixels height.
Action ended 11:23:06: PrepareDlg. Return value 1.
MSI (c) (F0:98) [11:23:06:018]: Doing action: AppSearch
Action start 11:23:06: AppSearch.
MSI (c) (F0:98) [11:23:06:021]: Note: 1: 2205 2: 3: AppSearch MSI (c) (F0:98) [11:23:06:021]: Note: 1: 2228 2: 3: AppSearch 4: SELECT `Property`, `Signature_` FROM `AppSearch` Action ended 11:23:06: AppSearch. Return value 0.
MSI (c) (F0:98) [11:23:06:023]: Doing action: LaunchConditions
Action start 11:23:06: LaunchConditions.
Action ended 11:23:06: LaunchConditions. Return value 1.
MSI (c) (F0:98) [11:23:06:027]: Doing action: ValidateProductID
Action start 11:23:06: ValidateProductID.
Action ended 11:23:06: ValidateProductID. Return value 1.
MSI (c) (F0:98) [11:23:06:029]: Doing action: CostInitialize
Action start 11:23:06: CostInitialize.
MSI (c) (F0:98) [11:23:06:031]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (c) (F0:98) [11:23:06:033]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (c) (F0:98) [11:23:06:033]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
Action ended 11:23:06: CostInitialize. Return value 1.
MSI (c) (F0:98) [11:23:06:035]: Doing action: FileCost
Action start 11:23:06: FileCost.
MSI (c) (F0:98) [11:23:06:037]: Note: 1: 2205 2: 3: MsiAssembly MSI (c) (F0:98) [11:23:06:037]: Note: 1: 2205 2: 3: Registry MSI (c) (F0:98) [11:23:06:038]: Note: 1: 2205 2: 3: Registry MSI (c) (F0:98) [11:23:06:038]: Note: 1: 2205 2: 3: Class MSI (c) (F0:98) [11:23:06:039]: Note: 1: 2205 2: 3: Extension MSI (c) (F0:98) [11:23:06:040]: Note: 1: 2205 2: 3: TypeLib Action ended 11:23:06: FileCost. Return value 1.
MSI (c) (F0:98) [11:23:06:042]: Doing action: CostFinalize
Action start 11:23:06: CostFinalize.
MSI (c) (F0:98) [11:23:06:045]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (c) (F0:98) [11:23:06:045]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (c) (F0:98) [11:23:06:046]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (c) (F0:98) [11:23:06:046]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (c) (F0:98) [11:23:06:047]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (c) (F0:98) [11:23:06:047]: Note: 1: 2205 2: 3: Patch MSI (c) (F0:98) [11:23:06:048]: Note: 1: 2205 2: 3: Condition MSI (c) (F0:98) [11:23:06:048]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (c) (F0:98) [11:23:06:049]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\ProgramData\Vanta\'.
MSI (c) (F0:98) [11:23:06:049]: PROPERTY CHANGE: Adding TUF property. Its value is 'C:\ProgramData\Vanta\tuf.db\'.
MSI (c) (F0:98) [11:23:06:050]: PROPERTY CHANGE: Adding LOG property. Its value is 'C:\ProgramData\Vanta\log\'.
MSI (c) (F0:98) [11:23:06:050]: PROPERTY CHANGE: Adding ROCKSDB property. Its value is 'C:\ProgramData\Vanta\osquery.db\'.
MSI (c) (F0:98) [11:23:06:051]: Target path resolution complete. Dumping Directory table...
MSI (c) (F0:98) [11:23:06:051]: Note: target paths subject to change (via custom actions or browsing)
MSI (c) (F0:98) [11:23:06:051]: Dir (target): Key: TARGETDIR, Object: C:\
MSI (c) (F0:98) [11:23:06:052]: Dir (target): Key: CommonAppDataFolder, Object: C:\ProgramData\
MSI (c) (F0:98) [11:23:06:052]: Dir (target): Key: INSTALLDIR, Object: C:\ProgramData\Vanta\
MSI (c) (F0:98) [11:23:06:053]: Dir (target): Key: TUF, Object: C:\ProgramData\Vanta\tuf.db\
MSI (c) (F0:98) [11:23:06:053]: Dir (target): Key: LOG, Object: C:\ProgramData\Vanta\log\
MSI (c) (F0:98) [11:23:06:053]: Dir (target): Key: ROCKSDB, Object: C:\ProgramData\Vanta\osquery.db\
MSI (c) (F0:98) [11:23:06:054]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (c) (F0:98) [11:23:06:054]: Note: 1: 2205 2: 3: MsiAssembly MSI (c) (F0:98) [11:23:06:055]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? Action ended 11:23:06: CostFinalize. Return value 1.
MSI (c) (F0:98) [11:23:06:058]: Doing action: MigrateFeatureStates
Action start 11:23:06: MigrateFeatureStates.
Action ended 11:23:06: MigrateFeatureStates. Return value 0.
MSI (c) (F0:98) [11:23:06:060]: Skipping action: MaintenanceWelcomeDlg (condition is false)
MSI (c) (F0:98) [11:23:06:061]: Skipping action: ResumeDlg (condition is false)
MSI (c) (F0:98) [11:23:06:061]: Doing action: WelcomeDlg
Action start 11:23:06: WelcomeDlg.
MSI (c) (F0:18) [11:23:06:080]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (c) (F0:18) [11:23:06:080]: Note: 1: 2205 2: 3: Registry MSI (c) (F0:18) [11:23:06:081]: Note: 1: 2205 2: 3: BindImage MSI (c) (F0:18) [11:23:06:081]: Note: 1: 2205 2: 3: ProgId MSI (c) (F0:18) [11:23:06:082]: Note: 1: 2205 2: 3: PublishComponent MSI (c) (F0:18) [11:23:06:082]: Note: 1: 2205 2: 3: SelfReg MSI (c) (F0:18) [11:23:06:083]: Note: 1: 2205 2: 3: Extension MSI (c) (F0:18) [11:23:06:083]: Note: 1: 2205 2: 3: Font MSI (c) (F0:18) [11:23:06:083]: Note: 1: 2205 2: 3: Shortcut MSI (c) (F0:18) [11:23:06:084]: Note: 1: 2205 2: 3: Class MSI (c) (F0:18) [11:23:06:084]: Note: 1: 2205 2: 3: Icon MSI (c) (F0:18) [11:23:06:085]: Note: 1: 2205 2: 3: TypeLib MSI (c) (F0:18) [11:23:06:085]: Note: 1: 2727 2: MSI (c) (F0:98) [11:23:07:214]: Note: 1: 2262 2: Error 3: -2147287038 DEBUG: Error 2726: Action not found: WelcomeDlg
The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2726. The arguments are: WelcomeDlg, , Action ended 11:23:07: WelcomeDlg. Return value 0.
MSI (c) (F0:98) [11:23:07:224]: Doing action: ProgressDlg
Action start 11:23:07: ProgressDlg.
MSI (c) (F0:7C) [11:23:07:232]: Note: 1: 2262 2: Error 3: -2147287038 Info 2898.For WixUI_Font_Title textstyle, the system created a 'Tahoma' font, in 0 character set, of 14 pixels height.
Action ended 11:23:07: ProgressDlg. Return value 1.
MSI (c) (F0:98) [11:23:07:249]: Doing action: ExecuteAction
Action start 11:23:07: ExecuteAction.
MSI (c) (F0:98) [11:23:07:250]: PROPERTY CHANGE: Adding SECONDSEQUENCE property. Its value is '1'.
MSI (c) (F0:98) [11:23:07:251]: Grabbed execution mutex.
MSI (c) (F0:98) [11:23:07:251]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (F0:98) [11:23:07:252]: Switching to server: ROCKSDB="C:\ProgramData\Vanta\osquery.db\" INSTALLDIR="C:\ProgramData\Vanta\" TARGETDIR="C:\" LOG="C:\ProgramData\Vanta\log\" TUF="C:\ProgramData\Vanta\tuf.db\" CURRENTDIRECTORY="C:\Users\DREAMWORLD\Downloads" CLIENTUILEVEL="0" CLIENTPROCESSID="12016" USERNAME="DREAMWORLD" SOURCEDIR="C:\Users\DREAMWORLD\Downloads\" ACTION="INSTALL" EXECUTEACTION="INSTALL" ROOTDRIVE="C:\" INSTALLLEVEL="1" SECONDSEQUENCE="1" ADDLOCAL=Complete MSI (s) (3C:9C) [11:23:07:256]: Running installation inside multi-package transaction C:\Users\DREAMWORLD\Downloads\vanta.msi
MSI (s) (3C:9C) [11:23:07:257]: Grabbed execution mutex.
MSI (s) (3C:20) [11:23:07:259]: Resetting cached policy values
MSI (s) (3C:20) [11:23:07:259]: Machine policy value 'Debug' is 0
MSI (s) (3C:20) [11:23:07:260]: ******* RunEngine:
******* Product: C:\Users\DREAMWORLD\Downloads\vanta.msi
******* Action: INSTALL
******* CommandLine: **********
MSI (s) (3C:20) [11:23:07:260]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (3C:20) [11:23:07:262]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (3C:20) [11:23:07:262]: Machine policy value 'LimitSystemRestoreCheckpointing' is 0
MSI (s) (3C:20) [11:23:07:263]: Note: 1: 1715 2: Vanta Agent MSI (s) (3C:20) [11:23:07:263]: Note: 1: 2262 2: Error 3: -2147287038 MSI (s) (3C:20) [11:23:07:264]: Calling SRSetRestorePoint API. dwRestorePtType: 0, dwEventType: 102, llSequenceNumber: 0, szDescription: "Installed Vanta Agent".
MSI (s) (3C:20) [11:23:07:270]: The call to SRSetRestorePoint API succeeded. Returned status: 0, llSequenceNumber: 3.
MSI (s) (3C:20) [11:23:07:271]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (3C:20) [11:23:07:272]: Access database with Impersonation
MSI (s) (3C:20) [11:23:07:274]: File will have security applied from OpCode.
MSI (s) (3C:20) [11:23:07:292]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\DREAMWORLD\Downloads\vanta.msi' against software restriction policy
MSI (s) (3C:20) [11:23:07:292]: SOFTWARE RESTRICTION POLICY: C:\Users\DREAMWORLD\Downloads\vanta.msi has a digital signature
MSI (s) (3C:20) [11:23:07:410]: SOFTWARE RESTRICTION POLICY: C:\Users\DREAMWORLD\Downloads\vanta.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (3C:20) [11:23:07:411]: End dialog not enabled
MSI (s) (3C:20) [11:23:07:412]: Original package ==> C:\Users\DREAMWORLD\Downloads\vanta.msi
MSI (s) (3C:20) [11:23:07:412]: Package we're running from ==> C:\Windows\Installer\42b935ce.msi
MSI (s) (3C:20) [11:23:07:413]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (3C:20) [11:23:07:414]: APPCOMPAT: looking for appcompat database entry with ProductCode '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'.
MSI (s) (3C:20) [11:23:07:415]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (3C:20) [11:23:07:419]: Machine policy value 'TransformsSecure' is 0
MSI (s) (3C:20) [11:23:07:420]: User policy value 'TransformsAtSource' is 0
MSI (s) (3C:20) [11:23:07:421]: Machine policy value 'DisablePatch' is 0
MSI (s) (3C:20) [11:23:07:422]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (3C:20) [11:23:07:423]: Machine policy value 'DisableMsi' is 0
MSI (s) (3C:20) [11:23:07:424]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:07:425]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:07:426]: Running product '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}' with user privileges: It's not assigned.
MSI (s) (3C:20) [11:23:07:427]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (3C:20) [11:23:07:427]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (3C:20) [11:23:07:428]: APPCOMPAT: looking for appcompat database entry with ProductCode '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'.
MSI (s) (3C:20) [11:23:07:429]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (3C:20) [11:23:07:430]: Transforms are not secure.
MSI (s) (3C:20) [11:23:07:431]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\DREAMW~1\AppData\Local\Temp\MSIdca57.LOG'.
MSI (s) (3C:20) [11:23:07:431]: Command Line: ROCKSDB=C:\ProgramData\Vanta\osquery.db\ INSTALLDIR=C:\ProgramData\Vanta\ TARGETDIR=C:\ LOG=C:\ProgramData\Vanta\log\ TUF=C:\ProgramData\Vanta\tuf.db\ CURRENTDIRECTORY=C:\Users\DREAMWORLD\Downloads CLIENTUILEVEL=0 CLIENTPROCESSID=12016 USERNAME=DREAMWORLD SOURCEDIR=C:\Users\DREAMWORLD\Downloads\ ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE=C:\ INSTALLLEVEL=1 SECONDSEQUENCE=1 ADDLOCAL=Complete ACTION=INSTALL MSI (s) (3C:20) [11:23:07:432]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{23C3EE9F-DAD3-4B50-B8B8-C643F61F7F9F}'.
MSI (s) (3C:20) [11:23:07:433]: Product Code passed to Engine.Initialize: ''
MSI (s) (3C:20) [11:23:07:434]: Product Code from property table before transforms: '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'
MSI (s) (3C:20) [11:23:07:434]: Product Code from property table after transforms: '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'
MSI (s) (3C:20) [11:23:07:435]: Product not registered: beginning first-time install
MSI (s) (3C:20) [11:23:07:436]: Product {164B123E-E78F-44F6-8B96-F3F56D0CFCF3} is not managed.
MSI (s) (3C:20) [11:23:07:436]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:07:436]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:07:437]: MSI_LUA: Elevation required to install product, will prompt for credentials
MSI (s) (3C:20) [11:23:09:091]: MSI_LUA: Credential Request return = 0x0
MSI (s) (3C:20) [11:23:09:093]: MSI_LUA: Elevated credential consent provided. Install will run elevated
MSI (s) (3C:20) [11:23:09:094]: Note: 1: 2205 2: 3: MsiPackageCertificate MSI (s) (3C:20) [11:23:09:094]: Note: 1: 2205 2: 3: MsiDigitalCertificate MSI (s) (3C:20) [11:23:09:095]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (3C:20) [11:23:09:095]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (3C:20) [11:23:09:096]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (3C:20) [11:23:09:096]: Adding new sources is allowed.
MSI (s) (3C:20) [11:23:09:097]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:098]: Package name extracted from package path: 'vanta.msi'
MSI (s) (3C:20) [11:23:09:098]: Package to be registered: 'vanta.msi'
MSI (s) (3C:20) [11:23:09:099]: Note: 1: 2262 2: Error 3: -2147287038 MSI (s) (3C:20) [11:23:09:100]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (3C:20) [11:23:09:100]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:09:101]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:09:101]: Product installation will be elevated because user provided elevated credentials and product is being installed per-machine.
MSI (s) (3C:20) [11:23:09:102]: Running product '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}' with elevated privileges: Product is assigned.
MSI (s) (3C:20) [11:23:09:102]: PROPERTY CHANGE: Adding ROCKSDB property. Its value is 'C:\ProgramData\Vanta\osquery.db\'.
MSI (s) (3C:20) [11:23:09:102]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\ProgramData\Vanta\'.
MSI (s) (3C:20) [11:23:09:103]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (3C:20) [11:23:09:103]: PROPERTY CHANGE: Adding LOG property. Its value is 'C:\ProgramData\Vanta\log\'.
MSI (s) (3C:20) [11:23:09:104]: PROPERTY CHANGE: Adding TUF property. Its value is 'C:\ProgramData\Vanta\tuf.db\'.
MSI (s) (3C:20) [11:23:09:105]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\DREAMWORLD\Downloads'.
MSI (s) (3C:20) [11:23:09:105]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:106]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '12016'.
MSI (s) (3C:20) [11:23:09:107]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'DREAMWORLD'.
MSI (s) (3C:20) [11:23:09:107]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Users\DREAMWORLD\Downloads\'.
MSI (s) (3C:20) [11:23:09:108]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (3C:20) [11:23:09:108]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (s) (3C:20) [11:23:09:109]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (3C:20) [11:23:09:109]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:110]: PROPERTY CHANGE: Adding SECONDSEQUENCE property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:111]: PROPERTY CHANGE: Adding ADDLOCAL property. Its value is 'Complete'.
MSI (s) (3C:20) [11:23:09:111]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (3C:20) [11:23:09:112]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '0b5cffdb09c109419c873b6d8cf90a79'.
MSI (s) (3C:20) [11:23:09:112]: RESTART MANAGER: Session opened.
MSI (s) (3C:20) [11:23:09:113]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:114]: Engine has iefSecondSequence set to true.
MSI (s) (3C:20) [11:23:09:114]: TRANSFORMS property is now: MSI (s) (3C:20) [11:23:09:115]: PROPERTY CHANGE: Deleting SOURCEDIR property. Its current value is 'C:\Users\DREAMWORLD\Downloads\'.
MSI (s) (3C:20) [11:23:09:115]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '100'.
MSI (s) (3C:20) [11:23:09:117]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming
MSI (s) (3C:20) [11:23:09:118]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Favorites
MSI (s) (3C:20) [11:23:09:119]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (3C:20) [11:23:09:122]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Documents
MSI (s) (3C:20) [11:23:09:123]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (3C:20) [11:23:09:125]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (3C:20) [11:23:09:126]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (3C:20) [11:23:09:127]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (3C:20) [11:23:09:128]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (3C:20) [11:23:09:129]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Local
MSI (s) (3C:20) [11:23:09:130]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Pictures
MSI (s) (3C:20) [11:23:09:132]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (3C:20) [11:23:09:133]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (3C:20) [11:23:09:135]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (3C:20) [11:23:09:136]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (3C:20) [11:23:09:138]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (3C:20) [11:23:09:141]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (3C:20) [11:23:09:143]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (3C:20) [11:23:09:144]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (3C:20) [11:23:09:145]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (3C:20) [11:23:09:147]: SHELL32::SHGetFolderPath returned: C:\Users\DREAMWORLD\Desktop
MSI (s) (3C:20) [11:23:09:149]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (3C:20) [11:23:09:150]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (3C:20) [11:23:09:151]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (3C:20) [11:23:09:157]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (s) (3C:20) [11:23:09:158]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:159]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (3C:20) [11:23:09:159]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:160]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:161]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (3C:20) [11:23:09:161]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\42b935ce.msi'.
MSI (s) (3C:20) [11:23:09:162]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\DREAMWORLD\Downloads\vanta.msi'.
MSI (s) (3C:20) [11:23:09:163]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (3C:20) [11:23:09:163]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (3C:20) [11:23:09:163]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (3C:20) [11:23:09:164]: Machine policy value 'DisableRollback' is 0
MSI (s) (3C:20) [11:23:09:164]: User policy value 'DisableRollback' is 0
MSI (s) (3C:20) [11:23:09:165]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (s) (3C:20) [11:23:09:165]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:166]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (3C:20) [11:23:09:166]: Doing action: INSTALL
Action start 11:23:09: INSTALL.
MSI (s) (3C:20) [11:23:09:169]: Running ExecuteSequence
MSI (s) (3C:20) [11:23:09:169]: Doing action: FindRelatedProducts
Action start 11:23:09: FindRelatedProducts.
MSI (s) (3C:20) [11:23:09:171]: Skipping FindRelatedProducts action: already done on client side
Action ended 11:23:09: FindRelatedProducts. Return value 0.
MSI (s) (3C:20) [11:23:09:173]: Doing action: LaunchConditions
Action start 11:23:09: LaunchConditions.
Action ended 11:23:09: LaunchConditions. Return value 1.
MSI (s) (3C:20) [11:23:09:176]: Doing action: ValidateProductID
Action start 11:23:09: ValidateProductID.
Action ended 11:23:09: ValidateProductID. Return value 1.
MSI (s) (3C:20) [11:23:09:177]: Doing action: CostInitialize
Action start 11:23:09: CostInitialize.
MSI (s) (3C:20) [11:23:09:179]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (3C:20) [11:23:09:179]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:180]: Note: 1: 2205 2: 3: Patch MSI (s) (3C:20) [11:23:09:181]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (3C:20) [11:23:09:181]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (3C:20) [11:23:09:182]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (3C:20) [11:23:09:182]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (3C:20) [11:23:09:183]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (3C:20) [11:23:09:183]: Note: 1: 2205 2: 3: Patch Action ended 11:23:09: CostInitialize. Return value 1.
MSI (s) (3C:20) [11:23:09:183]: Doing action: FileCost
Action start 11:23:09: FileCost.
MSI (s) (3C:20) [11:23:09:185]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (3C:20) [11:23:09:186]: Note: 1: 2205 2: 3: Registry MSI (s) (3C:20) [11:23:09:186]: Note: 1: 2205 2: 3: Registry MSI (s) (3C:20) [11:23:09:186]: Note: 1: 2205 2: 3: Class MSI (s) (3C:20) [11:23:09:186]: Note: 1: 2205 2: 3: Extension MSI (s) (3C:20) [11:23:09:187]: Note: 1: 2205 2: 3: TypeLib Action ended 11:23:09: FileCost. Return value 1.
MSI (s) (3C:20) [11:23:09:189]: Doing action: CostFinalize
Action start 11:23:09: CostFinalize.
MSI (s) (3C:20) [11:23:09:191]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:192]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:192]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:192]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:193]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (3C:20) [11:23:09:193]: Note: 1: 2205 2: 3: Patch MSI (s) (3C:20) [11:23:09:193]: Note: 1: 2205 2: 3: Condition MSI (s) (3C:20) [11:23:09:194]: Target path resolution complete. Dumping Directory table...
MSI (s) (3C:20) [11:23:09:195]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (3C:20) [11:23:09:195]: Dir (target): Key: TARGETDIR, Object: C:\
MSI (s) (3C:20) [11:23:09:195]: Dir (target): Key: CommonAppDataFolder, Object: C:\ProgramData\
MSI (s) (3C:20) [11:23:09:196]: Dir (target): Key: INSTALLDIR, Object: C:\ProgramData\Vanta\
MSI (s) (3C:20) [11:23:09:196]: Dir (target): Key: TUF, Object: C:\ProgramData\Vanta\tuf.db\
MSI (s) (3C:20) [11:23:09:197]: Dir (target): Key: LOG, Object: C:\ProgramData\Vanta\log\
MSI (s) (3C:20) [11:23:09:197]: Dir (target): Key: ROCKSDB, Object: C:\ProgramData\Vanta\osquery.db\
MSI (s) (3C:20) [11:23:09:198]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (3C:20) [11:23:09:198]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? Action ended 11:23:09: CostFinalize. Return value 1.
MSI (s) (3C:20) [11:23:09:200]: Doing action: MigrateFeatureStates
Action start 11:23:09: MigrateFeatureStates.
MSI (s) (3C:20) [11:23:09:202]: Skipping MigrateFeatureStates action: already done on client side
Action ended 11:23:09: MigrateFeatureStates. Return value 0.
MSI (s) (3C:20) [11:23:09:203]: Doing action: InstallValidate
Action start 11:23:09: InstallValidate.
MSI (s) (3C:20) [11:23:09:206]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '0b5cffdb09c109419c873b6d8cf90a79'.
MSI (s) (3C:20) [11:23:09:207]: Feature: Complete; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:208]: Component: SetRocksdbPermissions; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:208]: Component: SetFolderPermissions; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:209]: Component: RemoveExtraFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:210]: Component: launcher; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:210]: Component: metalauncher; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:210]: Component: vantaService; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:211]: Component: autoupdater; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:212]: Component: extensions; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:212]: Component: osqueryd; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:213]: Component: vantacli; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:213]: Component: cert; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:213]: Component: conf; Installed: Absent; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:214]: Component: __RemoveExtraFiles65; Installed: Null; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:215]: Component: __RemoveExtraFiles66; Installed: Null; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:216]: Component: __RemoveExtraFiles67; Installed: Null; Request: Local; Action: Local
MSI (s) (3C:20) [11:23:09:216]: Note: 1: 2205 2: 3: Registry MSI (s) (3C:20) [11:23:09:217]: Note: 1: 2205 2: 3: BindImage MSI (s) (3C:20) [11:23:09:218]: Note: 1: 2205 2: 3: ProgId MSI (s) (3C:20) [11:23:09:218]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (3C:20) [11:23:09:219]: Note: 1: 2205 2: 3: SelfReg MSI (s) (3C:20) [11:23:09:219]: Note: 1: 2205 2: 3: Extension MSI (s) (3C:20) [11:23:09:220]: Note: 1: 2205 2: 3: Font MSI (s) (3C:20) [11:23:09:220]: Note: 1: 2205 2: 3: Shortcut MSI (s) (3C:20) [11:23:09:221]: Note: 1: 2205 2: 3: Class MSI (s) (3C:20) [11:23:09:221]: Note: 1: 2205 2: 3: Icon MSI (s) (3C:20) [11:23:09:222]: Note: 1: 2205 2: 3: TypeLib MSI (s) (3C:20) [11:23:09:228]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (3C:20) [11:23:09:229]: Note: 1: 2205 2: 3: Registry MSI (s) (3C:20) [11:23:09:229]: Note: 1: 2205 2: 3: BindImage MSI (s) (3C:20) [11:23:09:229]: Note: 1: 2205 2: 3: ProgId MSI (s) (3C:20) [11:23:09:230]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (3C:20) [11:23:09:231]: Note: 1: 2205 2: 3: SelfReg MSI (s) (3C:20) [11:23:09:231]: Note: 1: 2205 2: 3: Extension MSI (s) (3C:20) [11:23:09:231]: Note: 1: 2205 2: 3: Font MSI (s) (3C:20) [11:23:09:232]: Note: 1: 2205 2: 3: Shortcut MSI (s) (3C:20) [11:23:09:232]: Note: 1: 2205 2: 3: Class MSI (s) (3C:20) [11:23:09:233]: Note: 1: 2205 2: 3: Icon MSI (s) (3C:20) [11:23:09:233]: Note: 1: 2205 2: 3: TypeLib MSI (s) (3C:20) [11:23:09:233]: Note: 1: 2727 2: MSI (s) (3C:20) [11:23:09:233]: Note: 1: 2205 2: 3: FilesInUse MSI (s) (3C:20) [11:23:09:240]: Note: 1: 2727 2: Action ended 11:23:09: InstallValidate. Return value 1.
MSI (s) (3C:20) [11:23:09:243]: Doing action: InstallInitialize
Action start 11:23:09: InstallInitialize.
MSI (s) (3C:20) [11:23:09:245]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:09:246]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (3C:20) [11:23:09:246]: BeginTransaction: Locking Server
MSI (s) (3C:20) [11:23:09:246]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (3C:20) [11:23:09:248]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (3C:20) [11:23:09:248]: Server not locked: locking for product {164B123E-E78F-44F6-8B96-F3F56D0CFCF3}
Action ended 11:23:09: InstallInitialize. Return value 1.
MSI (s) (3C:20) [11:23:09:252]: Doing action: ProcessComponents
Action start 11:23:09: ProcessComponents.
MSI (s) (3C:20) [11:23:09:256]: Note: 1: 2205 2: 3: MsiPatchCertificate MSI (s) (3C:20) [11:23:09:257]: LUA patching is disabled: missing MsiPatchCertificate table
MSI (s) (3C:20) [11:23:09:257]: Resolving source.
MSI (s) (3C:20) [11:23:09:258]: Resolving source to launched-from source.
MSI (s) (3C:20) [11:23:09:258]: Setting launched-from source as last-used.
MSI (s) (3C:20) [11:23:09:259]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\DREAMWORLD\Downloads\'.
MSI (s) (3C:20) [11:23:09:259]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Users\DREAMWORLD\Downloads\'.
MSI (s) (3C:20) [11:23:09:260]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}'.
MSI (s) (3C:20) [11:23:09:261]: SOURCEDIR ==> C:\Users\DREAMWORLD\Downloads\
MSI (s) (3C:20) [11:23:09:261]: SOURCEDIR product ==> {164B123E-E78F-44F6-8B96-F3F56D0CFCF3}
MSI (s) (3C:20) [11:23:09:262]: Determining source type
MSI (s) (3C:20) [11:23:09:262]: Source type from package 'vanta.msi': 2
MSI (s) (3C:20) [11:23:09:263]: SECREPAIR: Re-Create hashes
MSI (s) (3C:20) [11:23:09:264]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{164B123E-E78F-44F6-8B96-F3F56D0CFCF3}
MSI (s) (3C:20) [11:23:09:264]: SECREPAIR: SourceHash database file already exists. Deleting it.
MSI (s) (3C:20) [11:23:09:265]: Note: 1: 2262 2: SourceHash 3: -2147287038 MSI (s) (3C:20) [11:23:09:267]: SECREPAIR: New Hash Database creation complete.
MSI (s) (3C:20) [11:23:09:392]: Source path resolution complete. Dumping Directory table...
MSI (s) (3C:20) [11:23:09:393]: Dir (source): Key: TARGETDIR, Object: C:\Users\DREAMWORLD\Downloads\, LongSubPath: , ShortSubPath: MSI (s) (3C:20) [11:23:09:394]: Dir (source): Key: CommonAppDataFolder, Object: C:\Users\DREAMWORLD\Downloads\, LongSubPath: PData\, ShortSubPath: MSI (s) (3C:20) [11:23:09:394]: Dir (source): Key: INSTALLDIR, Object: C:\Users\DREAMWORLD\Downloads\, LongSubPath: PData\Vanta\, ShortSubPath: MSI (s) (3C:20) [11:23:09:395]: Dir (source): Key: TUF, Object: C:\Users\DREAMWORLD\Downloads\, LongSubPath: PData\Vanta\tuf.db\, ShortSubPath: MSI (s) (3C:20) [11:23:09:396]: Dir (source): Key: LOG, Object: C:\Users\DREAMWORLD\Downloads\, LongSubPath: PData\Vanta\log\, ShortSubPath: MSI (s) (3C:20) [11:23:09:396]: Dir (source): Key: ROCKSDB, Object: C:\Users\DREAMWORLD\Downloads\, LongSubPath: PData\Vanta\osquery.db\, ShortSubPath: Action ended 11:23:09: ProcessComponents. Return value 1.
MSI (s) (3C:20) [11:23:09:404]: Doing action: UnpublishFeatures
Action start 11:23:09: UnpublishFeatures.
Action ended 11:23:09: UnpublishFeatures. Return value 1.
MSI (s) (3C:20) [11:23:09:406]: Doing action: StopServices
Action start 11:23:09: StopServices.
Action ended 11:23:09: StopServices. Return value 1.
MSI (s) (3C:20) [11:23:09:409]: Doing action: DeleteServices
Action start 11:23:09: DeleteServices.
Action ended 11:23:09: DeleteServices. Return value 1.
MSI (s) (3C:20) [11:23:09:412]: Doing action: RemoveFiles
Action start 11:23:09: RemoveFiles.
Action ended 11:23:09: RemoveFiles. Return value 1.
MSI (s) (3C:20) [11:23:09:415]: Doing action: RemoveFolders
Action start 11:23:09: RemoveFolders.
Action ended 11:23:09: RemoveFolders. Return value 1.
MSI (s) (3C:20) [11:23:09:417]: Doing action: CreateFolders
Action start 11:23:09: CreateFolders.
Action ended 11:23:09: CreateFolders. Return value 1.
MSI (s) (3C:20) [11:23:09:420]: Doing action: InstallFiles
Action start 11:23:09: InstallFiles.
MSI (s) (3C:20) [11:23:09:422]: Note: 1: 2205 2: 3: Patch MSI (s) (3C:20) [11:23:09:423]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` MSI (s) (3C:20) [11:23:09:423]: Note: 1: 2262 2: Error 3: -2147287038 MSI (s) (3C:20) [11:23:09:424]: Note: 1: 2205 2: 3: MsiSFCBypass MSI (s) (3C:20) [11:23:09:424]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ? MSI (s) (3C:20) [11:23:09:424]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (3C:20) [11:23:09:425]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? MSI (s) (3C:20) [11:23:09:425]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (3C:20) [11:23:09:426]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (3C:20) [11:23:09:427]: Note: 1: 2205 2: 3: PatchPackage Action ended 11:23:09: InstallFiles. Return value 1.
MSI (s) (3C:20) [11:23:09:429]: Doing action: InstallServices
Action start 11:23:09: InstallServices.
Action ended 11:23:09: InstallServices. Return value 1.
MSI (s) (3C:20) [11:23:09:431]: Doing action: SchedServiceConfig
Action start 11:23:09: SchedServiceConfig.
MSI (s) (3C:D8) [11:23:09:434]: Invoking remote custom action. DLL: C:\Windows\Installer\MSID905.tmp, Entrypoint: SchedServiceConfig
MSI (s) (3C:D4) [11:23:09:434]: Generating random cookie.
MSI (s) (3C:D4) [11:23:09:437]: Created Custom Action Server with PID 12084 (0x2F34).
MSI (s) (3C:A4) [11:23:09:465]: Running as a service.
MSI (s) (3C:A4) [11:23:09:469]: Hello, I'm your 32bit Impersonated custom action server.
SchedServiceConfig: Entering SchedServiceConfig in C:\Windows\Installer\MSID905.tmp, version 3.11.4516.0
MSI (s) (3C!00) [11:23:09:477]: PROPERTY CHANGE: Adding RollbackServiceConfig property. Its value is 'SchedServiceConfig'.
MSI (s) (3C!00) [11:23:09:478]: Doing action: RollbackServiceConfig
Action start 11:23:09: RollbackServiceConfig.
Action ended 11:23:09: RollbackServiceConfig. Return value 1.
MSI (s) (3C!00) [11:23:09:484]: PROPERTY CHANGE: Adding ExecServiceConfig property. Its value is 'SchedServiceConfig€Vanta€1€restart€restart€restart€0€0€€'.
MSI (s) (3C!00) [11:23:09:485]: Doing action: ExecServiceConfig
Action start 11:23:09: ExecServiceConfig.
Action ended 11:23:09: ExecServiceConfig. Return value 1.
Action ended 11:23:09: SchedServiceConfig. Return value 1.
MSI (s) (3C:20) [11:23:09:491]: Doing action: StartServices
Action start 11:23:09: StartServices.
Action ended 11:23:09: StartServices. Return value 1.
MSI (s) (3C:20) [11:23:09:494]: Doing action: CopyLog
Action start 11:23:09: CopyLog.
Action ended 11:23:09: CopyLog. Return value 1.
MSI (s) (3C:20) [11:23:09:497]: Doing action: SetRegisterCmd
Action start 11:23:09: SetRegisterCmd.
MSI (s) (3C:20) [11:23:09:499]: PROPERTY CHANGE: Adding RegisterCmd property. Its value is '"C:\ProgramData\Vanta\vanta-cli.exe" register --secret= --email='.
Action ended 11:23:09: SetRegisterCmd. Return value 1.
MSI (s) (3C:20) [11:23:09:500]: Doing action: RegisterCmd
Action start 11:23:09: RegisterCmd.
Action ended 11:23:09: RegisterCmd. Return value 1.
MSI (s) (3C:20) [11:23:09:503]: Doing action: RegisterUser
Action start 11:23:09: RegisterUser.
Action ended 11:23:09: RegisterUser. Return value 1.
MSI (s) (3C:20) [11:23:09:506]: Doing action: RegisterProduct
Action start 11:23:09: RegisterProduct.
MSI (s) (3C:20) [11:23:09:507]: Note: 1: 2262 2: Error 3: -2147287038 MSI (s) (3C:20) [11:23:09:508]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
Action ended 11:23:09: RegisterProduct. Return value 1.
MSI (s) (3C:20) [11:23:09:509]: Doing action: PublishFeatures
Action start 11:23:09: PublishFeatures.
Action ended 11:23:09: PublishFeatures. Return value 1.
MSI (s) (3C:20) [11:23:09:513]: Doing action: PublishProduct
Action start 11:23:09: PublishProduct.
MSI (s) (3C:20) [11:23:09:515]: Note: 1: 2205 2: 3: Icon MSI (s) (3C:20) [11:23:09:515]: Note: 1: 2228 2: 3: Icon 4: SELECT `Name`, `Data` FROM `Icon` Action ended 11:23:09: PublishProduct. Return value 1.
MSI (s) (3C:20) [11:23:09:518]: Doing action: InstallExecute
Action start 11:23:09: InstallExecute.
MSI (s) (3C:20) [11:23:09:520]: Running Script: C:\Windows\Installer\MSID8D5.tmp
MSI (s) (3C:20) [11:23:09:520]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (3C:20) [11:23:09:522]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (3C:20) [11:23:09:522]: Machine policy value 'DisableRollback' is 0
MSI (s) (3C:20) [11:23:09:523]: Note: 1: 2318 2: MSI (s) (3C:20) [11:23:09:524]: Note: 1: 2318 2: MSI (s) (3C:20) [11:23:09:524]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (3C:20) [11:23:09:525]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1435785957,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (3C:20) [11:23:09:526]: Executing op: ProductInfo(ProductKey={164B123E-E78F-44F6-8B96-F3F56D0CFCF3},ProductName=Vanta Agent,PackageName=vanta.msi,Language=1033,Version=33685506,Assignment=1,ObsoleteArg=0,,,PackageCode={23C3EE9F-DAD3-4B50-B8B8-C643F61F7F9F},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=2)
MSI (s) (3C:20) [11:23:09:527]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (3C:20) [11:23:09:527]: Executing op: DialogInfo(Type=1,Argument=Vanta Agent)
MSI (s) (3C:20) [11:23:09:528]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (3C:20) [11:23:09:528]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (3C:20) [11:23:09:528]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (3C:20) [11:23:09:529]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (3C:20) [11:23:09:530]: Executing op: ProgressTotal(Total=12,Type=1,ByteEquivalent=24000)
MSI (s) (3C:20) [11:23:09:531]: Executing op: ComponentRegister(ComponentId={F2A9EA48-2633-4DEE-B0E1-E9970B06B70B},KeyPath=C:\ProgramData\Vanta\osquery.db\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:531]: Executing op: ComponentRegister(ComponentId={143F59DF-84D3-4956-8B3E-0D5F026832D3},KeyPath=C:\ProgramData\Vanta\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:532]: Executing op: ComponentRegister(ComponentId={8A450DD4-0C7B-4ACA-BAEA-5D6496658FA0},KeyPath=C:\ProgramData\Vanta\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:533]: Executing op: ComponentRegister(ComponentId={36736221-E768-54BA-9A17-4231D7458AF7},KeyPath=C:\ProgramData\Vanta\launcher.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:534]: Executing op: ComponentRegister(ComponentId={9B679534-0816-5237-9009-104D0E76B2DD},KeyPath=C:\ProgramData\Vanta\metalauncher.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:534]: Executing op: ComponentRegister(ComponentId={05274C45-58C4-5FBF-9F3E-C7A086E50A75},KeyPath=C:\ProgramData\Vanta\vanta-agent.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:535]: Executing op: ComponentRegister(ComponentId={880DEE9E-4CE4-5F50-A300-6833ECA11857},KeyPath=C:\ProgramData\Vanta\autoupdater.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:535]: Executing op: ComponentRegister(ComponentId={37348ECB-4658-5DA2-B2D7-FD0559A07C5A},KeyPath=C:\ProgramData\Vanta\osquery-vanta.ext.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:536]: Executing op: ComponentRegister(ComponentId={9740CF16-F0BA-513D-9D7B-F519A322E4EB},KeyPath=C:\ProgramData\Vanta\osqueryd.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:537]: Executing op: ComponentRegister(ComponentId={311E9D20-B9DA-5DA9-84CB-4D6238310F8F},KeyPath=C:\ProgramData\Vanta\vanta-cli.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:538]: Executing op: ComponentRegister(ComponentId={F2B37425-E4CA-502D-80AF-E053293FBD04},KeyPath=C:\ProgramData\Vanta\cert.pem,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:538]: Executing op: ComponentRegister(ComponentId={9D822EE4-47CF-58A5-BDD0-12AED01DFBC1},KeyPath=C:\ProgramData\Vanta\vanta.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (3C:20) [11:23:09:539]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (3C:20) [11:23:09:539]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (3C:20) [11:23:09:540]: Executing op: ServiceControl(,Name=Vanta,Action=2,Wait=1,)
MSI (s) (3C:20) [11:23:09:540]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1])
MSI (s) (3C:20) [11:23:09:541]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (3C:20) [11:23:09:542]: Executing op: ServiceControl(,Name=Vanta,Action=8,Wait=1,)
MSI (s) (3C:20) [11:23:09:542]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (3C:20) [11:23:09:543]: Executing op: FolderCreate(Folder=C:\ProgramData\Vanta\osquery.db\,Foreign=0,,SDDLText=D:PAI(A;OICI;0x120000;;;WD)(A;CI;0x1200a9;;;WD)(A;OICI;FA;;;SY)(A;OICI;FA;;;BA))
MSI (s) (3C:20) [11:23:09:545]: Executing op: FolderCreate(Folder=C:\ProgramData\Vanta\,Foreign=0,,SDDLText=D:PAI(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;BU))
MSI (s) (3C:20) [11:23:09:546]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (3C:20) [11:23:09:547]: Executing op: ProgressTotal(Total=60919063,Type=0,ByteEquivalent=1)
MSI (s) (3C:20) [11:23:09:548]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Vanta\)
MSI (s) (3C:20) [11:23:09:548]: Executing op: SetSourceFolder(Folder=1\PData\Vanta\)
MSI (s) (3C:20) [11:23:09:549]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,MediaCabinet=Vanta.cab,BytesPerTick=65536,CopierType=2,ModuleFileName=C:\Windows\Installer\42b935ce.msi,,,,,IsFirstPhysicalMedia=1)
MSI (s) (3C:20) [11:23:09:549]: Executing op: FileCopySDDL(SourceName=txb8clma.exe|autoupdater.exe,SourceCabKey=AutoupdaterBinary,DestName=autoupdater.exe,Attributes=512,FileSize=5959584,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=413829378,HashPart2=14058075,HashPart3=2137199491,HashPart4=-1100473504,,)
MSI (s) (3C:20) [11:23:09:549]: File: C:\ProgramData\Vanta\autoupdater.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:550]: Source for file 'AutoupdaterBinary' is compressed
MSI (s) (3C:20) [11:23:09:589]: Executing op: FileCopySDDL(SourceName=cert.pem,SourceCabKey=certificate,DestName=cert.pem,Attributes=512,FileSize=4464,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1679127231,HashPart2=-413311635,HashPart3=1118630312,HashPart4=-808622879,,)
MSI (s) (3C:20) [11:23:09:590]: File: C:\ProgramData\Vanta\cert.pem;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:591]: Source for file 'certificate' is compressed
MSI (s) (3C:20) [11:23:09:593]: Executing op: FileCopySDDL(SourceName=igto8pac.con|vanta.conf,SourceCabKey=conf,DestName=vanta.conf,Attributes=512,FileSize=71,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1324229145,HashPart2=-2120418342,HashPart3=480139083,HashPart4=1806476948,,)
MSI (s) (3C:20) [11:23:09:594]: File: C:\ProgramData\Vanta\vanta.conf;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:594]: Source for file 'conf' is compressed
MSI (s) (3C:20) [11:23:09:597]: Executing op: FileCopySDDL(SourceName=bgq5ctu0.exe|osquery-vanta.ext.exe,SourceCabKey=ExtensionsBinary,DestName=osquery-vanta.ext.exe,Attributes=512,FileSize=9803168,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1786886541,HashPart2=900932144,HashPart3=1990476212,HashPart4=357250443,,)
MSI (s) (3C:20) [11:23:09:597]: File: C:\ProgramData\Vanta\osquery-vanta.ext.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:598]: Source for file 'ExtensionsBinary' is compressed
MSI (s) (3C:20) [11:23:09:651]: Executing op: FileCopySDDL(SourceName=launcher.exe,SourceCabKey=LauncherBinary,DestName=launcher.exe,Attributes=512,FileSize=5132704,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1702189795,HashPart2=-1854290310,HashPart3=-1707698914,HashPart4=-2083425651,,)
MSI (s) (3C:20) [11:23:09:652]: File: C:\ProgramData\Vanta\launcher.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:653]: Source for file 'LauncherBinary' is compressed
MSI (s) (3C:20) [11:23:09:687]: Executing op: FileCopySDDL(SourceName=i4wtzihm.exe|metalauncher.exe,SourceCabKey=MetalauncherBinary,DestName=metalauncher.exe,Attributes=512,FileSize=5062048,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1108212599,HashPart2=-795579196,HashPart3=-2145421754,HashPart4=948531571,,)
MSI (s) (3C:20) [11:23:09:688]: File: C:\ProgramData\Vanta\metalauncher.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:689]: Source for file 'MetalauncherBinary' is compressed
MSI (s) (3C:20) [11:23:09:723]: Executing op: FileCopySDDL(SourceName=osqueryd.exe,SourceCabKey=OsquerydBinary,DestName=osqueryd.exe,Attributes=512,FileSize=23200160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=4.1.2.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (3C:20) [11:23:09:723]: File: C:\ProgramData\Vanta\osqueryd.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:724]: Source for file 'OsquerydBinary' is compressed
MSI (s) (3C:20) [11:23:09:865]: Executing op: FileCopySDDL(SourceName=nsbbtsrz.exe|vanta-cli.exe,SourceCabKey=VantaCliBinary,DestName=vanta-cli.exe,Attributes=512,FileSize=6702496,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2026905161,HashPart2=-2140790638,HashPart3=-1664388535,HashPart4=-1277026413,,)
MSI (s) (3C:20) [11:23:09:866]: File: C:\ProgramData\Vanta\vanta-cli.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:867]: Source for file 'VantaCliBinary' is compressed
MSI (s) (3C:20) [11:23:09:910]: Executing op: FileCopySDDL(SourceName=7jb2gwsb.exe|vanta-agent.exe,SourceCabKey=VantaServiceBinary,DestName=vanta-agent.exe,Attributes=512,FileSize=5054368,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-779572755,HashPart2=-841680682,HashPart3=-303884202,HashPart4=-2074008963,,)
MSI (s) (3C:20) [11:23:09:910]: File: C:\ProgramData\Vanta\vanta-agent.exe;To be installed;Won't patch;No existing file
MSI (s) (3C:20) [11:23:09:911]: Source for file 'VantaServiceBinary' is compressed
MSI (s) (3C:20) [11:23:09:945]: Executing op: CacheSizeFlush(,)
MSI (s) (3C:20) [11:23:09:945]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2])
MSI (s) (3C:20) [11:23:09:950]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (3C:20) [11:23:09:951]: Executing op: ServiceInstall(Name=Vanta,DisplayName=Vanta,ImagePath=C:\ProgramData\Vanta\vanta-agent.exe,ServiceType=16,StartType=2,ErrorControl=32769,,Dependencies=[~],,,Password=**********,Description=The Vanta Agent runs in the background and collects security and compliance information from this computer,,)
MSI (s) (3C:20) [11:23:09:953]: Executing op: ActionStart(Name=RollbackServiceConfig,,)
MSI (s) (3C:20) [11:23:09:955]: Executing op: CustomActionSchedule(Action=RollbackServiceConfig,ActionType=3329,Source=BinaryData,Target=RollbackServiceConfig,CustomActionData=SchedServiceConfig)
MSI (s) (3C:20) [11:23:09:956]: Executing op: ActionStart(Name=ExecServiceConfig,,)
MSI (s) (3C:20) [11:23:09:959]: Executing op: CustomActionSchedule(Action=ExecServiceConfig,ActionType=3073,Source=BinaryData,Target=ExecServiceConfig,CustomActionData=SchedServiceConfig€Vanta€1€restart€restart€restart€0€0€€)
MSI (s) (3C:7C) [11:23:09:960]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIDB0A.tmp, Entrypoint: ExecServiceConfig
MSI (s) (3C:D4) [11:23:09:962]: Generating random cookie.
MSI (s) (3C:D4) [11:23:09:963]: System Environment : Client has accepted UAC prompt
MSI (s) (3C:D4) [11:23:09:963]: System Environment : Client has accepted UAC prompt
MSI (s) (3C:D4) [11:23:09:965]: Created Custom Action Server with PID 3880 (0xF28).
MSI (s) (3C:A4) [11:23:09:988]: Running as a service.
MSI (s) (3C:A4) [11:23:09:990]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
ExecServiceConfig: Entering ExecServiceConfig in C:\Windows\Installer\MSIDB0A.tmp, version 3.11.4516.0
ExecServiceConfig: Configuring Service: Vanta
MSI (s) (3C:20) [11:23:10:000]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1])
MSI (s) (3C:20) [11:23:10:002]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (3C:20) [11:23:10:003]: Executing op: ServiceControl(,Name=Vanta,Action=1,Wait=1,)
MSI (s) (3C:20) [11:23:11:059]: Executing op: ActionStart(Name=CopyLog,,)
MSI (s) (3C:20) [11:23:11:063]: Executing op: CustomActionSchedule(Action=CopyLog,ActionType=3554,Source=C:\,Target=cmd /c copy C:\Users\DREAMW~1\AppData\Local\Temp\MSIdca57.LOG C:\Users\DREAMWORLD\Downloads\vanta.msi\..\vanta-installation-log-please-email-to-support.txt,)
MSI (s) (3C:20) [11:23:11:064]: Executing op: ActionStart(Name=RegisterCmd,Description=Please log in using the browser window that just opened.,)
MSI (s) (3C:20) [11:23:11:068]: Executing op: CustomActionSchedule(Action=RegisterCmd,ActionType=3073,Source=BinaryData,Target=WixQuietExec64,CustomActionData="C:\ProgramData\Vanta\vanta-cli.exe" register --secret= --email=)
MSI (s) (3C:BC) [11:23:11:073]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIDF60.tmp, Entrypoint: WixQuietExec64
WixQuietExec64: Entering WixQuietExec64 in C:\Windows\Installer\MSIDF60.tmp, version 3.11.4516.0
WixQuietExec64: "C:\ProgramData\Vanta\vanta-cli.exe" register --secret= --email=
WixQuietExec64: SECRET WixQuietExec64: Attempting to get node key to verify that agent is enrolled
WixQuietExec64: Secret not specified; attempting to register via vanta.com
WixQuietExec64: Succeeded in creating a new osquery client
WixQuietExec64: 2022/12/20 11:23:36 {"method":"Runtime.consoleAPICalled","params":{"type":"warning","args":[{"type":"string","value":"Warning: fragment with name RiskScenarioForReviewFragment already exists.\ngraphql-tag enforces all fragment names across your application to be unique; read more about\nthis in the docs: http://dev.apollodata.com/core/fragments.html#unique-names"}],"executionContextId":2,"timestamp":1.671515616548524e+12,"stackTrace":{"callFrames":[{"functionName":"","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338821},{"functionName":"p","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338660},{"functionName":"d","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339634},{"functionName":"f","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339864},{"functionName":"pGBat.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15134,"columnNumber":11},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"cI8O8.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15120,"columnNumber":4282},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"3O9NG.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":6683,"columnNumber":3582},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.
WixQuietExec64: 2022/12/20 11:23:36 {"method":"Runtime.consoleAPICalled","params":{"type":"warning","args":[{"type":"string","value":"Warning: fragment with name RiskScenarioVersionFragment already exists.\ngraphql-tag enforces all fragment names across your application to be unique; read more about\nthis in the docs: http://dev.apollodata.com/core/fragments.html#unique-names"}],"executionContextId":2,"timestamp":1.671515616551859e+12,"stackTrace":{"callFrames":[{"functionName":"","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338821},{"functionName":"p","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338660},{"functionName":"d","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339634},{"functionName":"f","scriptId":"8","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339864},{"functionName":"aDL5Q.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15777,"columnNumber":5053},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"cI8O8.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15120,"columnNumber":4458},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"3O9NG.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":6683,"columnNumber":3582},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.
WixQuietExec64: 2022/12/20 11:23:39 {"method":"Runtime.consoleAPICalled","params":{"type":"warning","args":[{"type":"string","value":"Warning: fragment with name RiskScenarioForReviewFragment already exists.\ngraphql-tag enforces all fragment names across your application to be unique; read more about\nthis in the docs: http://dev.apollodata.com/core/fragments.html#unique-names"}],"executionContextId":3,"timestamp":1.6715156193098098e+12,"stackTrace":{"callFrames":[{"functionName":"","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338821},{"functionName":"p","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338660},{"functionName":"d","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339634},{"functionName":"f","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339864},{"functionName":"pGBat.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15134,"columnNumber":11},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"cI8O8.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15120,"columnNumber":4282},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"3O9NG.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":6683,"columnNumber":3582},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/i
WixQuietExec64: 2022/12/20 11:23:39 {"method":"Runtime.consoleAPICalled","params":{"type":"warning","args":[{"type":"string","value":"Warning: fragment with name RiskScenarioVersionFragment already exists.\ngraphql-tag enforces all fragment names across your application to be unique; read more about\nthis in the docs: http://dev.apollodata.com/core/fragments.html#unique-names"}],"executionContextId":3,"timestamp":1.67151561931042e+12,"stackTrace":{"callFrames":[{"functionName":"","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338821},{"functionName":"p","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":338660},{"functionName":"d","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339634},{"functionName":"f","scriptId":"56","url":"https://static.vanta.com/static/index.d945b3ec.js","lineNumber":7,"columnNumber":339864},{"functionName":"aDL5Q.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15777,"columnNumber":5053},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"cI8O8.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":15120,"columnNumber":4458},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":707},{"functionName":"u","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":0,"columnNumber":811},{"functionName":"3O9NG.react/jsx-runtime","scriptId":"9","url":"https://static.vanta.com/static/index.2f998884.js","lineNumber":6683,"columnNumber":3582},{"functionName":"l","scriptId":"9","url":"https://static.vanta.com/static/ind
WixQuietExec64: 2022/12/20 11:24:27 Failed to fetch enrollment status.
WixQuietExec64: Error 0x80070001: Command line returned an error.
WixQuietExec64: Error 0x80070001: QuietExec64 Failed
WixQuietExec64: Error 0x80070001: Failed in ExecCommon method
CustomAction RegisterCmd returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 11:24:27: InstallExecute. Return value 3.
MSI (s) (3C:20) [11:24:27:485]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (3C:20) [11:24:27:487]: User policy value 'DisableRollback' is 0
MSI (s) (3C:20) [11:24:27:488]: Machine policy value 'DisableRollback' is 0
MSI (s) (3C:20) [11:24:27:490]: Note: 1: 2318 2: MSI (s) (3C:20) [11:24:27:492]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1435785957,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (3C:20) [11:24:27:492]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (3C:20) [11:24:27:493]: Executing op: DialogInfo(Type=1,Argument=Vanta Agent)
MSI (s) (3C:20) [11:24:27:493]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (3C:20) [11:24:27:495]: Executing op: ActionStart(Name=RegisterCmd,Description=Please log in using the browser window that just opened.,)
MSI (s) (3C:20) [11:24:27:496]: Executing op: ProductInfo(ProductKey={164B123E-E78F-44F6-8B96-F3F56D0CFCF3},ProductName=Vanta Agent,PackageName=vanta.msi,Language=1033,Version=33685506,Assignment=1,ObsoleteArg=0,,,PackageCode={23C3EE9F-DAD3-4B50-B8B8-C643F61F7F9F},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=2)
MSI (s) (3C:20) [11:24:27:497]: Executing op: ActionStart(Name=CopyLog,,)
MSI (s) (3C:20) [11:24:27:498]: Executing op: CustomActionRollback(Action=CopyLog,ActionType=3554,Source=C:\,Target=cmd /c copy C:\Users\DREAMW~1\AppData\Local\Temp\MSIdca57.LOG C:\Users\DREAMWORLD\Downloads\vanta.msi\..\vanta-installation-log-please-email-to-support.txt,)
MSI (s) (3C:F8) [11:24:27:499]: System Environment : Client has accepted UAC prompt
MSI (s) (3C:20) [11:24:27:499]: Executing op: ServiceControl(,Name=Vanta,Action=2,Wait=1,)
1: CopyLog 2: 0