Hello,

the only dll which was missing ever - as far as I remember - was the c++ 
runtime:
https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170
The bit-ness must match to your java bit-ness.

As it runs as normal user mode its unlikely that a dll is missing.

Did you try to configure the service account to your account?
(just for narrow down the issue)

Another issue could be the NTFS permission of Tomcat and/or java folder.

I run Tomcat 10 with Win 2019 without issues, so it's not a general problem I 
think.

Greetings, Thomas

> -----Ursprüngliche Nachricht-----
> Von: Heidt, Larry <larry.he...@dematic.com.INVALID>
> Gesendet: Donnerstag, 22. September 2022 19:04
> An: Tomcat Users List <users@tomcat.apache.org>
> Betreff: RE: which missing file prevents tomcat 10 from starting as windows
> service ?
> 
> Thanks again for everyone’s review – please see my responses below
> 
> 
> 
> 
> 
> “tried a different major version of Java?  Earlier than 11, vendor other than
> Amazon (Corretto)?”
> 
> 
> 
> Our customer has dictated Java 11, and there were problems using the
> combination of Oracle Java 11 and jakarta/jaxws
> 
> 
> 
> 
> 
> “Have you tried a major version of TC earlier than 10.0.23?  Are you using
> any "native" components?”
> 
> 
> 
> Have not tried earlier Tomcat, and how would we determine whether we are
> using any "native" components ?
> 
> 
> 
> 
> 
> “Could there be an overly restrictive Windows access rights issue ?”
> 
> 
> 
> We’ve tried configuring Windows Services to start Tomcat using the most
> privileged Windows account, with the same results
> 
> 
> 
> 
> 
> “Is this a VM/EC2 instance or a Docker image?”
> 
> 
> 
> Don’t know, is some kind of VM, perhaps the systeminfo output below
> would answer those questions
> 
> 
> 
> 
> 
> “path variable?”
> 
> 
> 
> Tomcat is only failing when started as a Windows Service, succeeding when
> started from the Windows command line – seems like the PATH value should
> be the same for both (but maybe not)
> 
> 
> 
> The ...\apache-tomcat-10.0.23\bin\service.bat script to install Tomcat as a
> Windows Service does not configure the PATH variable, and the Windows
> Services UI tabs do not show the PATH value
> 
> 
> 
> How can one determine the effective PATH value used by Window Service
> startup ?
> 
> 
> 
> 
> 
> Thank you again for your attention to this issue
> 
> 
> 
> 
> 
> 
> 
> systeminfo:
> 
> 
> 
> Host Name:                 NDC-LOG-WMS-D01
> 
> OS Name:                   Microsoft Windows Server 2019 Standard
> 
> OS Version:                10.0.17763 N/A Build 17763
> 
> OS Manufacturer:           Microsoft Corporation
> 
> OS Configuration:          Member Server
> 
> OS Build Type:             Multiprocessor Free
> 
> Registered Owner:          Windows User
> 
> Registered Organization:
> 
> Product ID:                00429-70000-00000-AA946
> 
> Original Install Date:     5/2/2019, 3:40:46 PM
> 
> System Boot Time:          9/21/2022, 10:37:34 PM
> 
> System Manufacturer:       VMware, Inc.
> 
> System Model:              VMware7,1
> 
> System Type:               x64-based PC
> 
> Processor(s):              1 Processor(s) Installed.
> 
>                            [01]: Intel64 Family 6 Model 63 Stepping 2 
> GenuineIntel ~1796
> Mhz
> 
> BIOS Version:              VMware, Inc. VMW71.00V.13989454.B64.1906190538,
> 6/19/2019
> 
> Windows Directory:         C:\Windows
> 
> System Directory:          C:\Windows\system32
> 
> Boot Device:               \Device\HarddiskVolume2
> 
> System Locale:             en-us;English (United States)
> 
> Input Locale:              en-us;English (United States)
> 
> Time Zone:                 (UTC-06:00) Central Time (US & Canada)
> 
> Total Physical Memory:     8,191 MB
> 
> Available Physical Memory: 4,315 MB
> 
> Virtual Memory: Max Size:  9,471 MB
> 
> Virtual Memory: Available: 5,686 MB
> 
> Virtual Memory: In Use:    3,785 MB
> 
> Page File Location(s):     C:\pagefile.sys
> 
> Domain:                    xxxxxxx.org
> 
> Logon Server:              \\NDC-ITM-WDC-P01<file://NDC-ITM-WDC-P01>
> 
> Hotfix(s):                 13 Hotfix(s) Installed.
> 
>                            [01]: KB5013641
> 
>                            [02]: KB4470788
> 
>                            [03]: KB4480056
> 
>                            [04]: KB4493510
> 
>                            [05]: KB4509095
> 
>                            [06]: KB4535680
> 
>                            [07]: KB5005112
> 
>                            [08]: KB5012170
> 
>                            [09]: KB5017315
> 
>                            [10]: KB5012675
> 
>                            [11]: KB5014031
> 
>                            [12]: KB5014797
> 
>                            [13]: KB5015896
> 
> Network Card(s):           1 NIC(s) Installed.
> 
>                            [01]: vmxnet3 Ethernet Adapter
> 
>                                  Connection Name: Ethernet0 2
> 
>                                  DHCP Enabled:    No
> 
>                                  IP address(es)
> 
>                                  [01]: 10.8.152.76
> 
>                                  [02]: fe80::654a:bb1c:688b:acd0
> 
> Hyper-V Requirements:      A hypervisor has been detected. Features
> required for Hyper-V will not be displayed.
> 
> 
> 
> 
> 
> -----Original Message-----
> From: Thomas Hoffmann (Speed4Trade GmbH)
> <thomas.hoffm...@speed4trade.com.INVALID>
> Sent: Thursday, September 22, 2022 8:14 AM
> To: Tomcat Users List <users@tomcat.apache.org>
> Subject: AW: which missing file prevents tomcat 10 from starting as windows
> service ?
> 
> 
> 
> WARNING: This email originated outside of the company. DO NOT CLICK links
> or attachments or enter any information into forms unless you trust the
> sender and know the content is safe.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Short note from my side:
> 
> WinsxS is the cache for windows updates.
> 
> You should not copy from that location and also don't mess around with
> windows internal folders 🙂
> 
> ________________________________
> 
> Von: Berneburg, Cris J. - US
> <cberneb...@caci.com.INVALID<mailto:cberneb...@caci.com.INVALID>>
> 
> Gesendet: Donnerstag, 22. September 2022 14:38:35
> 
> An: Tomcat Users List
> 
> Betreff: RE: which missing file prevents tomcat 10 from starting as windows
> service ?
> 
> 
> 
> Hi Again Larry
> 
> 
> 
> Sorry, more guesswork on my part.
> 
> 
> 
> > This file does seem to exist:
> 
> > c:\Windows\WinSxS\amd64_microsoft-windows-wid-
> x86_31bf3856ad364e35_10.0.17763.1_none_a9a257b2f2875ecb\msvcr100.dl
> l
> 
> 
> 
> OT: That seems like a strange location.  Is that the Windows startup cache?
> The file might not be needed anyway.
> 
> 
> 
> > "1:39:55.5108687
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ad
> vapi32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> 
> 
> 1. Like Thomas Hoffmann asked, what's Tomcat's effective PATH variable set
> to?
> 
> 
> 
> If we can't determine what the issue is, perhaps we can figure out what it's
> not.  :-)  IOW, is this a platform, Windows, Java, or Tomcat issue?
> 
> 
> 
> 2. In case I missed it, have you tried a different major version of Java?  
> Earlier
> than 11, vendor other than Amazon (Corretto)?
> 
> 
> 
> 3. Have you tried a major version of TC earlier than 10.0.23?  Are you using
> any "native" components?
> 
> 
> 
> 4. Could there be an overly restrictive Windows access rights issue?
> 
> 
> 
> 5. Is this a VM/EC2 instance or a Docker image?  I'm wondering if there's
> something wonky in the way the computer was configured.
> 
> 
> 
> Again, apologies, as I am not an expert and can only ask generic diagnostic
> questions.
> 
> 
> 
> - Cris B.
> 
> 
> 
> -----------------------------------------
> 
> 
> 
> From: Heidt, Larry
> <larry.he...@dematic.com.INVALID<mailto:larry.he...@dematic.com.inva
> LID>>
> 
> Sent: Wednesday, September 21, 2022 6:11 PM
> 
> To: Tomcat Users List
> <users@tomcat.apache.org<mailto:users@tomcat.apache.org>>
> 
> Subject: RE: which missing file prevents tomcat 10 from starting as windows
> service ?
> 
> 
> 
> Thanks to everyone who read my initial message, and especially to Thomas,
> Cris, and Chuck for their responses
> 
> 
> 
> Please see the current issue below
> 
> 
> 
> 
> 
> Thomas,
> 
> 
> 
> “Does calling java.exe succeed?”
> 
> 
> 
> The following commons_daemon logging indicates no – is there something
> else to check ?
> 
> 
> 
> [2022-09-19 13:09:07] [error] ( javajni.c:828 ) [ 7652] CreateJavaVM Failed
> with error [-1]
> 
> [2022-09-19 13:09:07] [error] ( javajni.c:828 ) [ 7652] The system cannot find
> the file specified.
> 
> 
> 
> 
> 
> “use procmon to figure out which file is missing”
> 
> 
> 
> Your excellent ProcMon suggestion (never had used, will again) has enabled
> me to get past this first issue – please see the work-around below
> 
> 
> 
> 
> 
> Cris,
> 
> 
> 
> “Does the Windows Event Viewer provide any insight into the service
> failing?”
> 
> 
> 
> Only that “The system cannot open the file”, but thanks for the suggestion
> 
> 
> 
> “due to a missing msvcr100.dll?”
> 
> 
> 
> This file does seem to exist:
> 
> 
> 
> c:\Windows\WinSxS\amd64_microsoft-windows-wid-
> x86_31bf3856ad364e35_10.0.17763.1_none_a9a257b2f2875ecb\msvcr100.dl
> l
> 
> c:\Windows\WinSxS\amd64_microsoft-windows-
> wid_31bf3856ad364e35_10.0.17763.1_none_9870f12fb40ec83a\msvcr100.dl
> l
> 
> 
> 
> 
> 
> Chuck,
> 
> 
> 
> “JVM options include “exit” and “abort”, which seems rather odd. The JVM
> may be looking for files with those names.”
> 
> 
> 
> Thanks, however ProcMon doesn’t show the JVM looking for files with those
> names (also, those options are defined by Tomcat 10)
> 
> 
> 
> 
> 
> work-around for “system cannot find the file specified”
> 
> 
> 
> Copied several .dll files (identified as “not found” by ProcMon) from
> C:\Windows\System32 to …\apache-tomcat-10.0.23\bin
> 
> 
> 
> 
> 
> Current issue:
> 
> 
> 
> commons_daemon logging no longer indicates "The system cannot find the
> file specified", however still shows the following errors:
> 
> 
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:419 ) [  184]
> JNI_GetCreatedJavaVMs...
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[0] -
> Dcatalina.home=c:\Dematic\apache-tomcat-10.0.23
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[1] -
> Dcatalina.base=c:\Dematic\apache-tomcat-10.0.23
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[2] -
> Dignore.endorsed.dirs=c:\Dematic\apache-tomcat-10.0.23\endorsed
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[3] -
> Djava.io.tmpdir=c:\Dematic\apache-tomcat-10.0.23\temp
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[4] -
> Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[5] -
> Djava.util.logging.config.file=c:\Dematic\apache-tomcat-
> 10.0.23\conf\logging.properties
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[6]  -
> Dirista.log.dir=C:\Dematic\Foundation\Source\log -DSERVER_ID=Enterprise
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[7] --add-
> opens=java.base/java.lang=ALL-UNNAMED
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[8] --add-
> opens=java.base/java.io=ALL-UNNAMED
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[9] --add-
> opens=java.base/java.util=ALL-UNNAMED
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[10] --add-
> opens=java.base/java.util.concurrent=ALL-UNNAMED
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[11] --add-
> opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[12] -
> Djava.class.path=c:\Dematic\apache-tomcat-
> 10.0.23\bin\bootstrap.jar;c:\Dematic\apache-tomcat-10.0.23\bin\tomcat-
> juli.jar
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[13] exit
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[14] abort
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[15] -
> Xms128m
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:817 ) [11468] JVM Option[16] -
> Xmx256m
> 
> [2022-09-21 13:57:40] [error] ( javajni.c:828 ) [11468] CreateJavaVM Failed
> with error [-1]
> 
> [2022-09-21 13:57:40] [debug] ( javajni.c:1087) [11468] Java worker thread
> finished : with status = 2
> 
> [2022-09-21 13:57:40] [error] ( prunsrv.c:1483) [  184] Failed to start Java
> 
> [2022-09-21 13:57:40] [error] ( prunsrv.c:1840) [  184] ServiceStart returned
> 4.
> 
> [2022-09-21 13:57:40] [debug] ( prunsrv.c:1123) [  184] reportServiceStatusE:
> dwCurrentState = 1 (SERVICE_STOPPED), dwWin32ExitCode = 1066,
> dwWaitHint = 0 milliseconds, dwServiceSpecificExitCode = 4.
> 
> 
> 
> 
> 
> Does anyone know what a Tomcat exitCode of 4 means ?
> 
> 
> 
> The listing below is current output from ProcMon (for Filter settings, see the
> image below)
> 
> 
> 
> 
> 
> Thanks in advance for any further suggestions on this issue
> 
> 
> 
> 
> 
> "Time of Day","Process Name","PID","Operation","Path","Result","Detail"
> 
> "1:39:55.5025401
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Dematic\apache-
> tomcat-10.0.23\bin\Tomcat10.exe","NOT FOUND","Control: 0x8696c
> (Device:0x8 Function:2651 Method: 0)"
> 
> "1:39:55.5034320
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ntd
> ll.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5038553
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Session Manager","REPARSE","Desired Access: Query Value"
> 
> "1:39:55.5039788
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Session
> Manager\RaiseExceptionOnPossibleDeadlock","NAME NOT FOUND","Length:
> 80"
> 
> "1:39:55.5040583
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Control\Session Manager\Segment Heap","REPARSE","Desired Access:
> Query Value"
> 
> "1:39:55.5040879
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Session Manager\Segment Heap","NAME NOT FOUND","Desired
> Access: Query Value"
> 
> "1:39:55.5041758
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Control\Session Manager","REPARSE","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.5042597
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Session Manager\ResourcePolicies","NAME NOT
> FOUND","Length: 24"
> 
> "1:39:55.5058924
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ker
> nel32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5068590
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\Ker
> nelBase.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5079703
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\3c74afb9-8d82-44e3-b52c-
> 365dbf48382a","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5086107
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\SafeBoot\Option","REPARSE","Desired Access: Query Value, Set
> Value"
> 
> "1:39:55.5086663
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\SafeBoot\Option","NAME NOT FOUND","Desired Access: Query
> Value, Set Value"
> 
> "1:39:55.5087306
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Srp\GP\DLL","REPARSE","Desired Access: Read"
> 
> "1:39:55.5087712
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Srp\GP\DLL","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5088676
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Policies\
> Microsoft\Windows\safer\codeidentifiers\TransparentEnabled","NAME NOT
> FOUND","Length: 80"
> 
> "1:39:55.5089546 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-
> 6453\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","NAME
> NOT FOUND","Desired Access: Query Value"
> 
> "1:39:55.5090204
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\FileSystem\","REPARSE","Desired Access: Read"
> 
> "1:39:55.5100071
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ad
> vapi32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5108687
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ms
> vcrt.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5119070
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\sec
> host.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5127883
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\rpc
> rt4.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5137555
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\she
> ll32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5147659
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\cfg
> mgr32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5156807
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ucr
> tbase.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5169778
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\SH
> Core.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5292793
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\co
> mbase.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5294969
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Control\Session Manager","REPARSE","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.5296423
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Session Manager\ResourcePolicies","NAME NOT
> FOUND","Length: 24"
> 
> "1:39:55.5304988
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\bcr
> yptprimitives.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5472904
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\wi
> ndows.storage.dll","NOT FOUND","Control: 0x8696c (Device:0x8
> Function:2651 Method: 0)"
> 
> "1:39:55.5503267
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ms
> vcp_win.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5512550
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\pro
> fapi.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5521070
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\po
> wrprof.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5529711
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\shl
> wapi.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5538031
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\gdi
> 32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5546366
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\gdi
> 32full.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5674468
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\use
> r32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:55.5712775
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\wi
> n32u.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5730088
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ker
> nel.appcore.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5741861
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\cry
> ptsp.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.5768488
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Nls\Sorting\Versions","REPARSE","Desired Access: Read"
> 
> "1:39:55.5771663
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Control\Session Manager","REPARSE","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.5772903
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Session Manager\ResourcePolicies","NAME NOT
> FOUND","Length: 24"
> 
> "1:39:55.5774937
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\ca967c75-04bf-40b5-9a16-
> 98b5f9332a92","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5777984
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\b6fd710b-f783-4b1c-ab9c-
> c68099dcc0c7","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5779911
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\bf30465b-e93c-46fd-9cdf-
> f41c8904a01f","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5784542
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\f3a71a4b-6118-4257-8ccb-
> 39a33ba059d4","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5785527
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Lsa\FipsAlgorithmPolicy","REPARSE","Desired Access: Query
> Value"
> 
> "1:39:55.5786715
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Lsa\FipsAlgorithmPolicy\STE","NAME NOT FOUND","Length:
> 20"
> 
> "1:39:55.5787392
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Lsa\FipsAlgorithmPolicy","REPARSE","Desired Access: Query
> Value"
> 
> "1:39:55.5788609
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Lsa","REPARSE","Desired Access: Query Value"
> 
> "1:39:55.5789421
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Lsa\FipsAlgorithmPolicy","NAME NOT FOUND","Length: 20"
> 
> "1:39:55.5789755
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled","NAME NOT
> FOUND","Length: 20"
> 
> "1:39:55.5790609
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Policies\Microsoft\Cryptography\Configuration","REPARSE","Desired
> Access: Query Value"
> 
> "1:39:55.5791149
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Policies\Microsoft\Cryptography\Configuration","NAME NOT
> FOUND","Desired Access: Query Value"
> 
> "1:39:55.5795672
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Ole\PageAllocatorUseSystemHeap","NAME NOT FOUND","Length: 20"
> 
> "1:39:55.5797532
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Ole\PageAllocatorSystemHeapIsPrivate","NAME NOT FOUND","Length: 20"
> 
> "1:39:55.5799014
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Ole\AggressiveMTATesting","NAME NOT FOUND","Length: 16"
> 
> "1:39:55.5802599
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\Ole
> \FeatureDevelopmentProperties","NAME NOT FOUND","Desired Access:
> Read"
> 
> "1:39:55.5803053
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Microsoft\
> AppModel\Lookaside\Packages","NAME NOT FOUND","Desired Access:
> Read"
> 
> "1:39:55.5803620
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\Ole
> \FeatureDevelopmentProperties","NAME NOT FOUND","Desired Access:
> Read"
> 
> "1:39:55.5807376 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453\Software\Classes\Local
> Settings","REPARSE","Desired Access: Read"
> 
> "1:39:55.5809061 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453_Classes\Local
> Settings\Software\Microsoft\Ole\FeatureDevelopmentProperties","NAME
> NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5809705 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453_Classes\Local
> Settings\Software\Microsoft\Ole\FeatureDevelopmentProperties","NAME
> NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5810228 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453_Classes\Local
> Settings\Software\Microsoft\Ole","NAME NOT FOUND","Desired Access:
> Read"
> 
> "1:39:55.5812362
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\OL
> E\Tracing","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5813674
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\1aff6089-e863-4d36-bdfd-
> 3581f07440be","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5814911
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\f0558438-f56a-5987-47da-
> 040ca75aef05","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5816747
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\c7e09e2a-c663-5399-af79-
> 2fccd321d19a","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5817733
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-
> e2db7f381ffb","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5823573
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Error Message Instrument\","REPARSE","Desired Access: Read"
> 
> "1:39:55.5824161
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Error Message Instrument","NAME NOT FOUND","Desired
> Access: Read"
> 
> "1:39:55.5824938
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\f25bcd2e-2690-55dc-3bc4-
> 07b65b1b41c9","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5827069
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Microsoft\
> Windows NT\CurrentVersion\Image File Execution
> Options\Tomcat10.exe","NAME NOT FOUND","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.5827415
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5827939
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5828265
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Microsoft\
> Windows NT\CurrentVersion\Image File Execution
> Options\Tomcat10.exe","NAME NOT FOUND","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.5828584
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5828910
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\Windows\Display","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5830279
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT
> FOUND","Length: 20"
> 
> "1:39:55.5831801
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows
> NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck","NAME
> NOT FOUND","Length: 20"
> 
> "1:39:55.5832914
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\Wi
> ndows NT\CurrentVersion\Image File Execution
> Options\Tomcat10.exe","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5834202 PM","Tomcat10.exe","12464","RegQueryValue","HKU\S-1-
> 5-21-653100866-580197829-576124437-6453\Control
> Panel\Desktop\EnablePerProcessSystemDPI","NAME NOT FOUND","Length:
> 20"
> 
> "1:39:55.5835959
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows NT\CurrentVersion\Compatibility32\Tomcat10","NAME NOT
> FOUND","Length: 172"
> 
> "1:39:55.5836476
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\Wi
> ndows NT\CurrentVersion\IME Compatibility","NAME NOT FOUND","Desired
> Access: Read"
> 
> "1:39:55.5844996 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453\Control
> Panel\Desktop\MuiCached\MachineLanguageConfiguration","NAME NOT
> FOUND","Desired Access: Read"
> 
> "1:39:55.5845727
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\MUI\Settings","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5846896 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-
> 6453\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT
> FOUND","Desired Access: Read"
> 
> "1:39:55.5847302 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453\Control
> Panel\Desktop\LanguageConfiguration","NAME NOT FOUND","Desired
> Access: Read"
> 
> "1:39:55.5847920
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\MUI\Settings","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5848811 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-
> 6453\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT
> FOUND","Desired Access: Read"
> 
> "1:39:55.5849713 PM","Tomcat10.exe","12464","RegQueryValue","HKU\S-1-
> 5-21-653100866-580197829-576124437-6453\Control
> Panel\Desktop\PreferredUILanguages","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.5850869
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\MUI\Settings","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5852059 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453\Control
> Panel\Desktop\MuiCached","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.5852425
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\MUI\Settings","REPARSE","Desired Access: Read"
> 
> "1:39:55.5853693
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\MUI\Settings\PreferredUILanguages","NAME NOT
> FOUND","Length: 12"
> 
> "1:39:55.5883560
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\CI","REPARSE","Desired Access: Read"
> 
> "1:39:55.5884584
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\CI\Disable29756275","NAME NOT FOUND","Length: 20"
> 
> "1:39:55.5885449
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Microsoft\
> Windows NT\CurrentVersion\Image File Execution
> Options\Tomcat10.exe","NAME NOT FOUND","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.5959936
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\30336ed4-e327-447c-9de0-
> 51b652c86108","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5963614
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\a40b455c-253c-4311-ac6d-
> 6e667edccefc","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5964954
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-
> e2db7f381ffb","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5965997
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\32980f26-c8f5-5767-6b26-
> 635b3fa83c61","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5970012
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\30336ed4-e327-447c-9de0-
> 51b652c86108","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.5973068
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\32980f26-c8f5-5767-6b26-
> 635b3fa83c61","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.6568783
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\703fcc13-b66f-5868-ddd9-
> e2db7f381ffb","NAME NOT FOUND","Length: 528"
> 
> "1:39:55.6581179
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\um
> ppc15806.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.6739566
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> umppc15806.dll","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:55.6767148
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\um
> ppc15806.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.6778828
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> umppc15806.dll","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:55.6787792
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\um
> ppc15806.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:55.6823261 PM","Tomcat10.exe","12464","RegOpenKey","HKU\S-1-5-
> 21-653100866-580197829-576124437-6453\Control
> Panel\International\🌎🌏🌍","NAME NOT FOUND","Desired Access: Query
> Value"
> 
> "1:39:55.6823695
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Nls\CustomLocale","REPARSE","Desired Access: Read"
> 
> "1:39:55.6824582
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Nls\CustomLocale\en-US","NAME NOT FOUND","Length: 532"
> 
> "1:39:55.6824993
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Nls\ExtendedLocale","REPARSE","Desired Access: Read"
> 
> "1:39:55.6825699
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Nls\ExtendedLocale\en-US","NAME NOT FOUND","Length:
> 532"
> 
> "1:39:55.6831265
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\Globalizati
> on\Sorting\SortDefault.nls","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:55.6833650
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Nls\Sorting\Ids","REPARSE","Desired Access: Read"
> 
> "1:39:55.6834844
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Nls\Sorting\Ids\en-US","NAME NOT FOUND","Length: 90"
> 
> "1:39:55.6835285
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Nls\Sorting\Ids\en","NAME NOT FOUND","Length: 90"
> 
> "1:39:55.6885089
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Services\Tomcat10","REPARSE","Desired Access: Read"
> 
> "1:39:55.6887635
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\Description","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6888743
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\DisplayName","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6889569
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\ImagePath","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6889934
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\ServiceUser","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6890298
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\ServicePassword","NAME NOT FOUND","Length:
> 12"
> 
> "1:39:55.6890656
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\Startup","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6891030
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\Type","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6891393
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\DependsOn","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6891685
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Environment","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6891974
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\User","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6892257
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\LibraryPath","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6896729
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\JavaHome","BUFFER OVERFLOW","Length:
> 12"
> 
> "1:39:55.6898508
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Jvm","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6900412
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Options","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6900744
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Options","BUFFER OVERFLOW","Length:
> 144"
> 
> "1:39:55.6902225
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Options9","BUFFER OVERFLOW","Length:
> 12"
> 
> "1:39:55.6902580
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Options9","BUFFER OVERFLOW","Length:
> 144"
> 
> "1:39:55.6904436
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Classpath","BUFFER OVERFLOW","Length:
> 12"
> 
> "1:39:55.6904770
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\Classpath","BUFFER OVERFLOW","Length:
> 144"
> 
> "1:39:55.6909449
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Java\JvmSs","NAME NOT FOUND","Length: 16"
> 
> "1:39:55.6910941
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\Image","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6912074
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\WorkingPath","BUFFER
> OVERFLOW","Length: 12"
> 
> "1:39:55.6913863
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\Class","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6915541
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\Params","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6918018
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\Method","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6919102
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\Mode","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6920546
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Stop\Timeout","NAME NOT FOUND","Length: 16"
> 
> "1:39:55.6921706
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Start\Image","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6922781
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Start\WorkingPath","BUFFER
> OVERFLOW","Length: 12"
> 
> "1:39:55.6924286
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Start\Class","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6925690
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Start\Params","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6927518
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Start\Method","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6928574
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Start\Mode","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6930086
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\Path","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6931525
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\Prefix","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6932575
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\Level","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6933959
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\StdError","BUFFER OVERFLOW","Length: 12"
> 
> "1:39:55.6935328
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\StdOutput","BUFFER OVERFLOW","Length:
> 12"
> 
> "1:39:55.6937700
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\LogJniMessages","NAME NOT
> FOUND","Length: 16"
> 
> "1:39:55.6939013
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\PidFile","NAME NOT FOUND","Length: 12"
> 
> "1:39:55.6940214
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\WOW64
> 32Node\Apache Software Foundation\Procrun
> 2.0\Tomcat10\Parameters\Log\Rotate","NAME NOT FOUND","Length: 16"
> 
> "1:39:55.6944187
> PM","Tomcat10.exe","12464","CreateFile","C:\Dematic\apache-tomcat-
> 10.0.23\logs","NAME COLLISION","Desired Access: Read Data/List Directory,
> Synchronize, Disposition: Create, Options: Directory, Synchronous IO Non-
> Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write,
> AllocationSize: 0"
> 
> "1:39:55.7141895
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> conhost.exe","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
> 
> "1:39:55.7144897
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Microsoft\
> Windows NT\CurrentVersion\Image File Execution
> Options\Conhost.exe","NAME NOT FOUND","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.7330512
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Services\bam\State\UserSettings\S-1-5-21-653100866-580197829-
> 576124437-6453","NAME NOT FOUND","Desired Access: All Access"
> 
> "1:39:55.7330880
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SYSTEM\CurrentControl
> Set\Control\Session Manager\BAM","REPARSE","Desired Access: Query
> Value"
> 
> "1:39:55.7331146
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Session Manager\BAM","NAME NOT FOUND","Desired Access:
> Query Value"
> 
> "1:39:55.9154584
> PM","Tomcat10.exe","12464","CreateFile","C:\Dematic\apache-tomcat-
> 10.0.23\logs","NAME COLLISION","Desired Access: Read Data/List Directory,
> Synchronize, Disposition: Create, Options: Directory, Synchronous IO Non-
> Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write,
> AllocationSize: 0"
> 
> "1:39:55.9164547
> PM","Tomcat10.exe","12464","CreateFile","C:\Dematic\apache-tomcat-
> 10.0.23\logs","NAME COLLISION","Desired Access: Read Data/List Directory,
> Synchronize, Disposition: Create, Options: Directory, Synchronous IO Non-
> Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write,
> AllocationSize: 0"
> 
> "1:39:55.9500999
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Services","REPARSE","Desired Access: Read"
> 
> "1:39:55.9502902
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Services\Tomcat10\Alias","NAME NOT FOUND","Length: 144"
> 
> "1:39:55.9505780
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Rpc\MaxRpcSize","NAME NOT FOUND","Length: 16"
> 
> "1:39:55.9508694
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Services\CCG","REPARSE","Desired Access: Read"
> 
> "1:39:55.9509081
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Services\CCG","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.9509471
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\ComputerName\ActiveComputerName","REPARSE","Desired
> Access: Read"
> 
> "1:39:55.9513146
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Microsoft\
> Windows NT\CurrentVersion\Image File Execution
> Options\Tomcat10.exe","NAME NOT FOUND","Desired Access: Query Value,
> Enumerate Sub Keys"
> 
> "1:39:55.9514523
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Policies\Micr
> osoft\Windows NT\Rpc","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:55.9516969
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Rpc\IdleTimerWindow","NAME NOT FOUND","Length: 16"
> 
> "1:39:56.0884178
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\Programs\A
> mazonCorretto\jdk11\bin\server\jvm.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1023787
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT
> FOUND","Length: 20"
> 
> "1:39:56.1071149
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\psa
> pi.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651 Method:
> 0)"
> 
> "1:39:56.1074587
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\Session Manager","REPARSE","Desired Access: Query Value"
> 
> "1:39:56.1075791
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\Session Manager\SafeDllSearchMode","NAME NOT
> FOUND","Length: 16"
> 
> "1:39:56.1084284
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\wsock32.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1103464
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\ws
> 2_32.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:56.1114735
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\winmm.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1250864
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\version.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1274832
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\vcruntime140.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1299909
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\winmmbase.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1323509
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> winmmbase.dll","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.1333099
> PM","Tomcat10.exe","12464","DeviceIoControl","C:\Windows\System32\wi
> nmmbase.dll","NOT FOUND","Control: 0x8696c (Device:0x8 Function:2651
> Method: 0)"
> 
> "1:39:56.1348005
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\System\CurrentCont
> rolSet\Control\WMI\Security\d0f1a5c6-fc43-48ae-99bf-
> efb1c38be9d1","NAME NOT FOUND","Length: 528"
> 
> "1:39:56.4907758
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\Programs\A
> mazonCorretto\jdk11\bin\verify.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.4934106
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\dbghelp.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.4970818
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\apache-
> tomcat-10.0.23\bin\dbgcore.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5054671
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\Programs\A
> mazonCorretto\jdk11\bin\java.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5083623
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> tzres.dll","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5235963
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\SOFTWARE\Policies\Mi
> crosoft\WindowsStore","NAME NOT FOUND","Desired Access: Read"
> 
> "1:39:56.5236713
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\StateSeparation\RedirectionMap\Keys","REPARSE","Desired
> Access: Read"
> 
> "1:39:56.5237082
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\StateSeparation\RedirectionMap\Keys","NAME NOT
> FOUND","Desired Access: Read"
> 
> "1:39:56.5237441
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\La
> nguageOverlay\OverlayPackages\en-US","NAME NOT FOUND","Desired
> Access: Read"
> 
> "1:39:56.5241657
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> en-US\tzres.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5256281
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> tzres.dll","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5259650
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\StateSeparation\RedirectionMap\Keys","REPARSE","Desired
> Access: Read"
> 
> "1:39:56.5260094
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Control\StateSeparation\RedirectionMap\Keys","NAME NOT
> FOUND","Desired Access: Read"
> 
> "1:39:56.5260514
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\Software\Microsoft\La
> nguageOverlay\OverlayPackages\en-US","NAME NOT FOUND","Desired
> Access: Read"
> 
> "1:39:56.5264529
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Windows\System32\
> en-US\tzres.dll.mui","FILE LOCKED WITH ONLY READERS","SyncType:
> SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5269242
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Services\Tcpip\Parameters","REPARSE","Desired Access: Read"
> 
> "1:39:56.5292982
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\Programs\A
> mazonCorretto\jdk11\bin\jimage.dll","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.5331304
> PM","Tomcat10.exe","12464","QueryAllInformationFile","C:\Dematic\Progra
> ms\AmazonCorretto\jdk11\lib\modules","BUFFER
> OVERFLOW","CreationTime: 7/17/2022 4:01:02 AM, LastAccessTime:
> 8/22/2022 3:39:13 PM, LastWriteTime: 7/17/2022 4:01:02 AM, ChangeTime:
> 8/22/2022 3:39:13 PM, FileAttributes: A, AllocationSize: 141,025,280,
> EndOfFile: 141,024,749, NumberOfLinks: 1, DeletePending: False, Directory:
> False, IndexNumber: 0x1000000001c668, EaSize: 0, Access: Read Attributes,
> Synchronize, Position: 0, Mode: Synchronous IO Non-Alert,
> AlignmentRequirement: Byte"
> 
> "1:39:56.5334692
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows NT\CurrentVersion\Time Zones\Central Standard Time\Dynamic
> DST\2022","NAME NOT FOUND","Length: 4,094"
> 
> "1:39:56.5342472
> PM","Tomcat10.exe","12464","CreateFileMapping","C:\Dematic\Programs\A
> mazonCorretto\jdk11\lib\modules","FILE LOCKED WITH ONLY
> READERS","SyncType: SyncTypeCreateSection, PageProtection:
> PAGE_EXECUTE|PAGE_NOCACHE"
> 
> "1:39:56.6019958
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT
> FOUND","Length: 20"
> 
> "1:39:56.6021183
> PM","Tomcat10.exe","12464","RegQueryValue","HKLM\SOFTWARE\Microsof
> t\Windows
> NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck","NAME
> NOT FOUND","Length: 20"
> 
> "1:39:56.6152296
> PM","Tomcat10.exe","12464","RegOpenKey","HKLM\System\CurrentControl
> Set\Services\bam\State\UserSettings\S-1-5-21-653100866-580197829-
> 576124437-6453","NAME NOT FOUND","Desired Access: All Access"
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> -----Original Message-----
> 
> From: Berneburg, Cris J. - US <mailto:cberneb...@caci.com.INVALID>
> 
> Sent: Wednesday, September 21, 2022 6:27 AM
> 
> To: Tomcat Users List <mailto:users@tomcat.apache.org>
> 
> Subject: RE: which missing file prevents tomcat 10 from starting as windows
> service ?
> 
> 
> 
> WARNING: This email originated outside of the company. DO NOT CLICK links
> or attachments or enter any information into forms unless you trust the
> sender and know the content is safe.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Hi Larry
> 
> 
> 
> Some general guessing questions:
> 
> 
> 
> 1. Does the Windows Event Viewer provide any insight into the service
> failing?
> 
> 
> 
> 2. Is this possibly one of those issues due to a missing msvcr100.dll?
> 
> 
> 
> - Cris B.
> 
> 
> 
> -----Original Message-----
> 
> From: Heidt, Larry <mailto:larry.he...@dematic.com.INVALID>
> 
> Sent: Monday, September 19, 2022 5:15 PM
> 
> To: mailto:users@tomcat.apache.org
> 
> Subject: which missing file prevents tomcat 10 from starting as windows
> service ?
> 
> 
> 
> EXTERNAL EMAIL - This email originated from outside of CACI. Do not click
> any links or attachments unless you recognize and trust the sender.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> The "...\apache-tomcat-10.0.23\bin\service.bat install" command succeeds,
> however starting Tomcat from Windows Services fails, with the
> commons_daemon logging below indicating "The system cannot find the file
> specified."
> 
> 
> 
> Notes:
> 
> 
> 
> 
> 
>   1.  All files/folders referenced in the logging below exist, except the
> "endorsed" subfolder specified in the following:   '-
> Dignore.endorsed.dirs=c:\Dematic\apache-tomcat-10.0.23\endorsed'
> 
> 
> 
> 
> 
>   1.  Adding "--JavaHome "C:\Dematic\Programs\AmazonCorretto\jdk11" to
> the "service.bat install" command line does not eliminate the "'(null)'" 
> below,
> and the service fails with the same error
> 
> 
> 
> 
> 
>   *   "Loaded JVM DLL
> 'C:\Dematic\Programs\AmazonCorretto\jdk11\bin\server\jvm.dll', home
> '(null)'"
> 
> 
> 
> 
> 
>   1.  Starting Tomcat10.exe in console mode fails with the same error and
> very similar logging, except mainly for the following:
> 
> 
> 
> 
> 
>   *   "Loaded JVM DLL
> 'C:\Dematic\Programs\AmazonCorretto\jdk11\bin\server\jvm.dll', home
> 'C:\Dematic\Programs\AmazonCorretto\jdk11'"
> 
> 
> 
> 
> 
>   1.  The exact Java version used is 11.0.16.8.1
> 
> 
> 
> 
> 
> Is there any way to determine exactly which file cannot be found ?
> 
> 
> 
> Are there one or more likely culprits for the file which cannot be found ?
> 
> 
> 
> Thank you in advance for any assistance.
> 
> 
> 
> 
> 
> commons_daemon.yyyy-mm-dd.log:
> 
> 
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:1994) [11004] Apache Commons
> Daemon procrun log initialized.
> 
> [2022-09-19 13:09:06] [info]  ( prunsrv.c:2002) [11004] Apache Commons
> Daemon procrun (1.3.1.0 64-bit) started.
> 
> [2022-09-19 13:09:06] [info]  ( prunsrv.c:1906) [11004] Running Service
> 'Tomcat10'...
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:1677) [10552] Inside
> serviceMain()...
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:1123) [10552]
> reportServiceStatusE: dwCurrentState = 2 (SERVICE_START_PENDING),
> dwWin32ExitCode = 0, dwWaitHint = 3000 milliseconds,
> dwServiceSpecificExitCode = 0.
> 
> [2022-09-19 13:09:06] [info]  ( prunsrv.c:1422) [10552] Starting service...
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:497 ) [10552] Checking Java
> options for environment variable requirements
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for '-
> Dcatalina.home=c:\Dematic\apache-tomcat-10.0.23'
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for '-Dcatalina.base=c:\Dematic\apache-
> tomcat-10.0.23'
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for '-
> Dignore.endorsed.dirs=c:\Dematic\apache-tomcat-10.0.23\endorsed'
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for '-
> Djava.io.tmpdir=c:\Dematic\apache-tomcat-10.0.23\temp'
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for '-
> Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager'
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for '-
> Djava.util.logging.config.file=c:\Dematic\apache-tomcat-
> 10.0.23\conf\logging.properties'
> 
> [2022-09-19 13:09:06] [debug] ( prunsrv.c:501 ) [10552] Checking
> environment variable requirements for ' -
> Dirista.log.dir=C:\Dematic\Foundation\Source\log -DSERVER_ID=Enterprise'
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:216 ) [10552] Explicit RuntimeLib
> specified 'C:\Dematic\Programs\AmazonCorretto\jdk11\bin\server\jvm.dll'
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:280 ) [10552] Adding Java bin path
> to the PATH to fix loading of awt.dll:
> 'C:\Dematic\Programs\AmazonCorretto\jdk11\bin'
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:286 ) [10552] Loading JVM DLL
> 'C:\Dematic\Programs\AmazonCorretto\jdk11\bin\server\jvm.dll'
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:414 ) [10552] Loaded JVM DLL
> 'C:\Dematic\Programs\AmazonCorretto\jdk11\bin\server\jvm.dll', home
> '(null)'.
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:419 ) [10552]
> JNI_GetCreatedJavaVMs...
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:817 ) [ 7652] JVM Option[0] -
> Dcatalina.home=c:\Dematic\apache-tomcat-10.0.23
> 
> [2022-09-19 13:09:06] [debug] ( javajni.c:817 ) [ 7652] JVM Option[1] -
> Dcatalina.base=c:\Dematic\apache-tomcat-10.0.23
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[2] -
> Dignore.endorsed.dirs=c:\Dematic\apache-tomcat-10.0.23\endorsed
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[3] -
> Djava.io.tmpdir=c:\Dematic\apache-tomcat-10.0.23\temp
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[4] -
> Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[5] -
> Djava.util.logging.config.file=c:\Dematic\apache-tomcat-
> 10.0.23\conf\logging.properties
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[6]  -
> Dirista.log.dir=C:\Dematic\Foundation\Source\log -DSERVER_ID=Enterprise
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[7] --add-
> opens=java.base/java.lang=ALL-UNNAMED
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[8] --add-
> opens=java.base/java.io=ALL-UNNAMED
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[9] --add-
> opens=java.base/java.util=ALL-UNNAMED
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[10] --add-
> opens=java.base/java.util.concurrent=ALL-UNNAMED
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[11] --add-
> opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[12] -
> Djava.class.path=c:\Dematic\apache-tomcat-
> 10.0.23\bin\bootstrap.jar;c:\Dematic\apache-tomcat-10.0.23\bin\tomcat-
> juli.jar
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[13] exit
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[14] abort
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[15] -
> Xms128m
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:817 ) [ 7652] JVM Option[16] -
> Xmx256m
> 
> [2022-09-19 13:09:07] [error] ( javajni.c:828 ) [ 7652] CreateJavaVM Failed
> with error [-1]
> 
> [2022-09-19 13:09:07] [error] ( javajni.c:828 ) [ 7652] The system cannot find
> the file specified.
> 
> [2022-09-19 13:09:07] [debug] ( javajni.c:1087) [ 7652] Java worker thread
> finished : with status = 2
> 
> [2022-09-19 13:09:07] [error] ( prunsrv.c:1483) [10552] Failed to start Java
> 
> [2022-09-19 13:09:07] [error] ( prunsrv.c:1840) [10552] ServiceStart returned
> 4.
> 
> [2022-09-19 13:09:07] [debug] ( prunsrv.c:1123) [10552]
> reportServiceStatusE: dwCurrentState = 1 (SERVICE_STOPPED),
> dwWin32ExitCode = 1066, dwWaitHint = 0 milliseconds,
> dwServiceSpecificExitCode = 4.
> 
> [2022-09-19 13:09:07] [info]  ( prunsrv.c:1908) [11004] Run service finished.
> 
> [2022-09-19 13:09:07] [info]  ( prunsrv.c:2086) [11004] Apache Commons
> Daemon procrun finished.
> 
> 
> 
> ________________________________
> 
> 
> 
> This electronic message contains information from CACI International Inc or
> subsidiary companies, which may be company sensitive, proprietary,
> privileged or otherwise protected from disclosure. The information is
> intended to be used solely by the recipient(s) named above. If you are not an
> intended recipient, be aware that any review, disclosure, copying,
> distribution or use of this transmission or its contents is prohibited. If you
> have received this transmission in error, please notify the sender
> immediately.
> 
> 
> 
> ---------------------------------------------------------------------
> 
> To unsubscribe, e-mail: mailto:users-unsubscr...@tomcat.apache.org
> 
> For additional commands, e-mail: mailto:users-h...@tomcat.apache.org
> 
> 
> 
> ________________________________
> B�KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK
> KKKKKKKCB��[��X��ܚX�KK[XZ[
> �\�\��][��X��ܚX�P�X�]
> �\X�K�ܙ�B��܈Y][ۘ[��[X[��K[XZ[
> �\�\��Z[�X�] �\X�K�ܙ�B�

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to