File System Warnings from backup jobs

Support
1

I think there is a bug in the enumeration routines on this platform. Maybe it needs to be able to look at extended file status when reading network drives? Maybe the timing (timeouts) need to be extended slightly for files that take a second or two to decompress from the network server?
Thoughts? Thanks! radjr

  • 2024-07-19 17:44:23 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\JEM Directory Project\CMS070113_1\ProductTypeFrm.aspx DirectoryNotFoundException: Could not find a part of the path ‘\?\Q:\JEM\JEM Directory Project\CMS070113_1\ProductTypeFrm.aspx’.
  • 2024-07-19 17:44:23 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileBlockProcessor.FileEntry-PathProcessingFailed]: Failed to process path: Q:\JEM\Special Issue Mental Health in EM\dreamstime_xxl_197002960-Modified.psd IOException: The request is not supported.
  • 2024-07-19 17:44:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileBlockProcessor.FileEntry-PathProcessingFailed]: Failed to process path: Q:\JEM\Special Issue Mental Health in EM\dreamstime_xxl_197002960-Modified1024.png DirectoryNotFoundException: Could not find a part of the path ‘\?\Q:\JEM\Special Issue Mental Health in EM\dreamstime_xxl_197002960-Modified1024.png’.
  • 2024-07-19 17:44:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\JEM Directory Project\CMS070113_1\RegisterUser.aspx DirectoryNotFoundException: Could not find a part of the path ‘\?\Q:\JEM\JEM Directory Project\CMS070113_1\RegisterUser.aspx’.
  • 2024-07-19 17:44:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Special Issue Mental Health in EM\dreamstime_xxl_197002960-Modified_2000x1333.png DirectoryNotFoundException: Could not find a part of the path ‘\?\Q:\JEM\Special Issue Mental Health in EM\dreamstime_xxl_197002960-Modified_2000x1333.png’.
2

From Duplicati’s perspective, the mounted folders are “local” and it is treated this way, so no extra logic accounts for transient errors, and no timeouts are managed by Duplicati. It just opens the file and starts reading. Any delay or special cases should be handled by the OS.

I guess we could retry files that are not accessible, but do you have any suggestions? Have you seen another way of dealing with such errors in another application?

3

More background on this:

and I think Process Monitor wasn’t run, but it’s definitely hard to read the goings-on at low level.

If later versions of .NET run any better, .NET 8 is coming. Beta is currently on .NET Framework.

4

Thanks. When running ProcMan, what are you specifically looking for? Can I trigger on some event state to log the error?

It is some times though to tell if duplicati is running because it seems like nothing is going on…some way to set “verbose” mode?

Thank yoU!

5

Like I said, it’s hard to read. Generally something that looks like an error, especially if it sounds like “The request is not supported” probably returned as some sort of a shortened internal code though.

We tend not to do Windows internals here. We tend not to even do Win32. It’s mostly C# and .NET (various), although the Linux side has to do some low-level work that goes around mono to Linux…

6

Good Day. Still have the issue with file access. These are all files and folders on our server. It really looks like the file enumeration is not working properly. I watched the server as this backup was running and I have no console errors on the fileserver. The next time the job runs, it will not error with these files. I still think you are not properly handling extended file status properties and responses properly. Would appreciate if you can look into it again. What other logs do you need? Many thanks! Rich DeVito.

  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2.pdf DirectoryNotFoundException: Could not find a part of the path ‘\?\Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2.pdf’.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileBlockProcessor.FileEntry-PathProcessingFailed]: Failed to process path: Q:\ajrt\issue 16\Spring\layout\AJRT_V15_N2_Spring_2016_BC_ATRA.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Aini.pdf DirectoryNotFoundException: Could not find a part of the path ‘\?\Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Aini.pdf’.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2.qxp IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2.zip IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Aini2.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2_150DPI.png IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Aini3.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2_300DPI.png IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2_96DPI.png IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Angeletti2.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Front_cover_v15v2_original.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Angeletti_080022.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Spine_v15v2.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Clerveaux.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Thumbs.db IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Clerveaux2.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Title.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\JEM\Issue08\09_10\proof\JEM-6-5-00-Clerveaux3.pdf IOException: The request is not supported.
  • 2024-08-16 13:05:24 -04 - [Warning-Duplicati.Library.Main.Operation.Backup.FileEnumerationProcess-FileAccessError]: Error reported while accessing file: Q:\ajrt\issue 16\Spring\layout\Profiles\ IOException: The request is not supported.
7

Based on what experience, evidence, and expertise? You already got the reply from the author.

If you’re going to keep making this claim (also in original post), can you give technical explainer about what exactly you are talking about? Also talk about how some other programs are failing.

Please expand on that, in detail. Who diagnosed this (or is that a personal guess?). Who fixed?
PowerShell is a .NET app. Has anybody ever come up with a reliable repro of issue using that?

A developer level look is best done by developers, preferably the author. This would be easier if someone besides you can get it, otherwise you will have to do a lot of the “look” on your system.

The best I can do (as time allows – this is going in the wrong direction IMO – more on that later) would be to try to learn the Duplicati code design a little better in order to guide you in your tests.

We do not write .NET or Windows or your Windows driver. If the problem is there, a workaround may be possible, and priority depends on the frequency of the problem. This one is rare, but see

for a similar case and my suggested steps. Don’t you have support (likely paid) for your platform?
Talk to them, see if they have ever heard of the problem scenario you have in mind. Original post here guesses at extended file status (which is what), and timing. This all sounds like guesswork…

The first step would be to see if you can find a small test case that shows the problem, ideally with data (or at least paths) that you would be willing to post (if that is an issue). Small reduces log size.

The other reason for a controlled test is you can determine whether or not it’s purely enumeration, or maybe data reading is also needed. The similar topic is currently waiting for work described as:

Replace “Mountain Duck” with whatever support spot you have for problems involving your drive.

There should be status all over the place. I see you posted a GUI screenshot. See the status bar. There is detailed information on the specific job being run on the home page, even the files read.

In GUI, you have the choice of About → Show log → Live → Verbose (or whatever level you like). Logging to a file is much better for big logs. Options log-file=<path> log-file-log-level=verbose etc. Verbose will show paths, which is why I mentioned privacy. You’ll also see timestamps to second, which may be helpful if timeouts are a suspect, but the smoothest flow will be if no data changes.

Channel Pipeline shows the internal flow. Your message shows the spot of the complaint. Seeing Verbose log (especially of known paths that you can describe) may help isolate enumeration fails.

Underneath all that is probably a Windows driver that Process Monitor can watch, but that’s way below the ideal level for Duplicati application workarounds – we can only control the application…

8

OK. I have run procmon and found the error message. It looks to me that the remote file system call has failed somehow. What do you need from me to look at that system? Where will that error be? Thanks, Rich DeVito.

Date: 10/18/2024 5:45:11.2919802 PM
Thread: 30260
Class: File System
Operation: QueryRemoteProtocolInformation
Result: INVALID PARAMETER
Path: \PNPC_NW65\PRODUCTION\JOM\Issue10\07_08\layout\30478_page242_245.pdf
Duration: 0.0000172
0 FLTMGR.SYS FltDecodeParameters + 0x210b 0xfffff807079a64cb C:\Windows\System32\drivers\FLTMGR.SYS
1 FLTMGR.SYS FltDecodeParameters + 0x1bba 0xfffff807079a5f7a C:\Windows\System32\drivers\FLTMGR.SYS
2 FLTMGR.SYS FltDecodeParameters + 0xc61 0xfffff807079a5021 C:\Windows\System32\drivers\FLTMGR.SYS
3 FLTMGR.SYS FltDecodeParameters + 0x66b 0xfffff807079a4a2b C:\Windows\System32\drivers\FLTMGR.SYS
4 ntoskrnl.exe IofCallDriver + 0x55 0xfffff8070a04ad55 C:\Windows\system32\ntoskrnl.exe
5 ntoskrnl.exe IoBuildDeviceIoControlRequest + 0x450 0xfffff8070a0ed8f0 C:\Windows\system32\ntoskrnl.exe
6 ntoskrnl.exe NtQueryInformationFile + 0x7de 0xfffff8070a42aade C:\Windows\system32\ntoskrnl.exe
7 ntoskrnl.exe setjmpex + 0x8628 0xfffff8070a212308 C:\Windows\system32\ntoskrnl.exe
8 ntdll.dll NtQueryInformationFile + 0x14 0x7ffa7646d714 C:\Windows\SYSTEM32\ntdll.dll
9 KERNELBASE.dll GetFileInformationByHandleEx + 0xc7 0x7ffa73fa1117 C:\Windows\System32\KERNELBASE.dll
10 ntmarta.dll AccRewriteSetEntriesInAcl + 0x16b4 0x7ffa72ca5834 C:\Windows\SYSTEM32\ntmarta.dll
11 ntmarta.dll GetNamedSecurityInfoW + 0x316 0x7ffa72ca3316 C:\Windows\SYSTEM32\ntmarta.dll
12 ntmarta.dll GetNamedSecurityInfoW + 0x1bc 0x7ffa72ca31bc C:\Windows\SYSTEM32\ntmarta.dll
13 ADVAPI32.dll GetNamedSecurityInfoW + 0x38 0x7ffa74c827f8 C:\Windows\System32\ADVAPI32.dll
14 mscorlib.ni.dll mscorlib.ni.dll + 0xc5968e 0x7ffa3fbd968e C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\9707a28127c32bb87f1d241096ec2d9f\mscorlib.ni.dll
15 mscorlib.ni.dll mscorlib.ni.dll + 0xe3f941 0x7ffa3fdbf941 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\9707a28127c32bb87f1d241096ec2d9f\mscorlib.ni.dll
16 mscorlib.ni.dll mscorlib.ni.dll + 0xe3efbb 0x7ffa3fdbefbb C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\9707a28127c32bb87f1d241096ec2d9f\mscorlib.ni.dll
17 mscorlib.ni.dll mscorlib.ni.dll + 0xe40604 0x7ffa3fdc0604 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\9707a28127c32bb87f1d241096ec2d9f\mscorlib.ni.dll
18 mscorlib.ni.dll mscorlib.ni.dll + 0xe41210 0x7ffa3fdc1210 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\9707a28127c32bb87f1d241096ec2d9f\mscorlib.ni.dll
19 0x7ffa02713461 0x7ffa02713461

Description: Duplicati
Company: Duplicati Team
Name: Duplicati.GUI.TrayIcon.exe
Version: 2.0.8.1
Path: C:\ProgramData\Duplicati\updates\2.0.8.1\Duplicati.GUI.TrayIcon.exe
Command Line: “C:\ProgramData\Duplicati\updates\2.0.8.1\Duplicati.GUI.TrayIcon.exe”
PID: 13652
Parent PID: 1980
Session ID: 1
User: DESKTOP-SMQKS0G\radjr
Auth ID: 00000000:008b4d6f
Architecture: 64-bit
Virtualized: False
Integrity: Medium
Started: 10/11/2024 10:12:10 AM
Ended: (Running)
Modules:
Duplicati.GUI.TrayIcon.exe 0x2a41af30000 0x70000 C:\ProgramData\Duplicati\updates\2.0.8.1\Duplicati.GUI.TrayIcon.exe Duplicati Team 2.0.8.1 5/7/2024 7:41:16 AM
SQLite.Interop.dll 0x2a435bf0000 0x192000 C:\ProgramData\Duplicati\updates\2.0.8.1\x64\SQLite.Interop.dll Robert Simpson, et al. 1.0.111.0 6/8/2019 12:53:19 PM
System.Windows.Forms.ni.dll 0x7ff9ec980000 0x10ed000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\db81117267642c7a4b0eaa1e50b382f6\System.Windows.Forms.ni.dll Microsoft Corporation 4.8.9251.0 built by: NET481REL1LAST_C 5/31/2024 9:02:20 PM
System.Drawing.ni.dll 0x7ff9eda70000 0x1f3000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\47a1df73074165e2438536baad27c5f3\System.Drawing.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:31:41 PM
System.Data.ni.dll 0x7ff9ee050000 0x983000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data\01fe438d57f8e4ae65fa5179d634e318\System.Data.ni.dll Microsoft Corporation 4.8.9214.0 built by: NET481REL1LAST_B 11/29/2023 8:42:40 PM
System.Runtime.Serialization.ni.dll 0x7ff9ee9e0000 0x343000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\5e422134cb72248eda77477895277faa\System.Runtime.Serialization.ni.dll Microsoft Corporation 4.8.9241.0 built by: NET481REL1LAST_C 3/27/2024 10:38:56 PM
System.Web.ni.dll 0x7ff9f73a0000 0x103b000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web\a98b9e92145b304cc128926019843f2d\System.Web.ni.dll Microsoft Corporation 4.8.9277.0 built by: NET481REL1LAST_B 8/29/2024 11:20:32 PM
SQLite.Interop.dll 0x7ffa044c0000 0x171000 C:\ProgramData\Duplicati\updates\2.0.8.1\SQLite\win64\SQLite.Interop.dll Robert Simpson, et al. 1.0.111.0 6/8/2019 12:53:05 PM
System.Transactions.ni.dll 0x7ffa073f0000 0xdb000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\e65904f56775aa31eb4890deb91d189f\System.Transactions.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 7:03:22 PM
WindowsBase.ni.dll 0x7ffa0d580000 0x522000 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\98b9603f67bc5d080dfb85d8d4593341\WindowsBase.ni.dll Microsoft Corporation 4.8.9277.0 built by: NET481REL1LAST_B 8/30/2024 12:05:06 AM
System.Configuration.ni.dll 0x7ffa35d10000 0x133000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\180d982e9fcd91995a1787a2ccca0276\System.Configuration.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:31:22 PM
System.Core.ni.dll 0x7ffa35e50000 0xa85000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\1680cd34f07dcd5d87f72a5aeca8e7cc\System.Core.ni.dll Microsoft Corporation 4.8.9277.0 built by: NET481REL1LAST_B 8/29/2024 11:19:46 PM
System.Xml.ni.dll 0x7ffa368e0000 0x8b1000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\ff025c0b292785b6ff8fdae4f2514589\System.Xml.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:31:30 PM
System.ni.dll 0x7ffa371a0000 0xc1e000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System\a4c0b4f399f21c027f4e946f0a457ad3\System.ni.dll Microsoft Corporation 4.8.9261.0 built by: NET481REL1LAST_C 6/24/2024 9:17:15 PM
mscorlib.ni.dll 0x7ffa3ef80000 0x160f000 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\9707a28127c32bb87f1d241096ec2d9f\mscorlib.ni.dll Microsoft Corporation 4.8.9277.0 built by: NET481REL1LAST_B 8/29/2024 11:09:42 PM
System.Data.dll 0x7ffa47d30000 0x36a000 C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll Microsoft Corporation 4.8.9214.0 built by: NET481REL1LAST_B 11/29/2023 8:42:40 PM
System.Management.ni.dll 0x7ffa49280000 0x166000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\37d514f6e51b7bd5713acdfd00c9fcf5\System.Management.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:29:31 PM
diasymreader.dll 0x7ffa49ee0000 0x141000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll Microsoft Corporation 14.8.9241.0 built by: NET481REL1LAST_C 3/27/2024 7:43:16 PM
System.Web.Services.ni.dll 0x7ffa4a030000 0x222000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\895f1e72da91c20fcbb0fe97e0a97caf\System.Web.Services.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 7:14:53 PM
System.Net.Http.ni.dll 0x7ffa4a260000 0xa3000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Net.Http\21d4315996d28b0a75580f1e2dec929b\System.Net.Http.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:24:25 PM
System.Xml.Linq.ni.dll 0x7ffa4ca40000 0x79000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\e20568082d02a43f7b798f26e164eb4d\System.Xml.Linq.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:32:20 PM
Windows.UI.AppDefaults.dll 0x7ffa4cb90000 0x4a000 C:\Windows\System32\Windows.UI.AppDefaults.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 4/24/1996 12:00:30 AM
DWrite.dll 0x7ffa4d6a0000 0x27f000 C:\Windows\SYSTEM32\DWrite.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 10/14/1955 11:19:12 PM
TextShaping.dll 0x7ffa4d920000 0xae000 C:\Windows\System32\TextShaping.dll 5/16/1905 4:29:59 PM
virtdisk.dll 0x7ffa4f340000 0x13000 C:\Windows\SYSTEM32\virtdisk.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 6/11/1975 7:54:33 AM
edputil.dll 0x7ffa4f560000 0x24000 C:\Windows\SYSTEM32\edputil.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/17/1921 5:08:05 PM
wshbth.dll 0x7ffa50960000 0x15000 C:\Windows\system32\wshbth.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 7/16/2025 5:56:29 PM
pnrpnsp.dll 0x7ffa50980000 0x1b000 C:\Windows\system32\pnrpnsp.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 2/20/2016 8:20:53 AM
napinsp.dll 0x7ffa509a0000 0x17000 C:\Windows\system32\napinsp.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/26/2036 2:00:33 AM
winrnr.dll 0x7ffa50a30000 0x12000 C:\Windows\System32\winrnr.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 9/23/2012 1:53:25 AM
textinputframework.dll 0x7ffa50e60000 0xf9000 C:\Windows\SYSTEM32\textinputframework.dll Microsoft Corporation 10.0.19041.4957 (WinBuild.160101.0800) 12/17/1982 5:10:08 PM
VCRUNTIME140_1_CLR0400.dll 0x7ffa59b50000 0xc000 C:\Windows\SYSTEM32\VCRUNTIME140_1_CLR0400.dll Microsoft Corporation 14.32.31326.0 1/10/1910 4:44:05 AM
ucrtbase_clr0400.dll 0x7ffa59b60000 0xcd000 C:\Windows\SYSTEM32\ucrtbase_clr0400.dll Microsoft Corporation 14.32.31326.0 1/28/2015 8:27:23 PM
clr.dll 0x7ffa60930000 0x9a4000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll Microsoft Corporation 4.8.9277.0 built by: NET481REL1LAST_B 8/29/2024 11:13:12 PM
VCRUNTIME140_CLR0400.dll 0x7ffa61b90000 0x1b000 C:\Windows\SYSTEM32\VCRUNTIME140_CLR0400.dll Microsoft Corporation 14.32.31326.0 11/8/1935 8:10:18 AM
OneCoreCommonProxyStub.dll 0x7ffa63a40000 0x7f000 C:\Windows\System32\OneCoreCommonProxyStub.dll Microsoft Corporation 10.0.19041.4597 (WinBuild.160101.0800) 4/16/1914 6:36:12 AM
OneCoreUAPCommonProxyStub.dll 0x7ffa64140000 0x7d4000 C:\Windows\System32\OneCoreUAPCommonProxyStub.dll Microsoft Corporation 10.0.19041.4842 (WinBuild.160101.0800) 11/8/1978 2:00:52 PM
comctl32.dll 0x7ffa64a70000 0xb0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.4355_none_792ecafd2442822f\comctl32.dll Microsoft Corporation 6.10 (WinBuild.160101.0800) 5/6/1966 12:52:27 AM
mscoreei.dll 0x7ffa64d30000 0x9b000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll Microsoft Corporation 4.8.9093.0 built by: NET481REL1LAST_C 8/29/2022 12:53:16 PM
MSCOREE.DLL 0x7ffa64dd0000 0x65000 C:\Windows\SYSTEM32\MSCOREE.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 6/16/2013 5:38:19 AM
WININET.dll 0x7ffa660f0000 0x4d8000 C:\Windows\SYSTEM32\WININET.dll Microsoft Corporation 11.00.19041.3636 (WinBuild.160101.0800) 5/11/1981 4:06:44 PM
VCRUNTIME140.dll 0x7ffa66ef0000 0x1d000 C:\Windows\SYSTEM32\VCRUNTIME140.dll Microsoft Corporation 14.38.33135.0 7/8/1954 9:58:31 AM
secur32.dll 0x7ffa673d0000 0xc000 C:\Windows\SYSTEM32\secur32.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 11/24/1981 8:26:22 AM
comctl32.dll 0x7ffa67f90000 0x29a000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_60b8b9eb71f62e16\comctl32.dll Microsoft Corporation 6.10 (WinBuild.160101.0800) 4/6/1965 4:13:51 AM
MLANG.dll 0x7ffa68400000 0x42000 C:\Windows\SYSTEM32\MLANG.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 6/21/1991 8:05:46 PM
gdiplus.dll 0x7ffa68700000 0x1a5000 C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.4597_none_91a78020cc854124\gdiplus.dll Microsoft Corporation 10.0.19041.4597 (WinBuild.160101.0800) 6/23/1991 11:38:21 PM
Windows.StateRepositoryPS.dll 0x7ffa68ef0000 0x146000 C:\Windows\System32\Windows.StateRepositoryPS.dll Microsoft Corporation 10.0.19041.4842 (WinBuild.160101.0800) 9/17/1940 12:07:55 PM
cryptnet.dll 0x7ffa692f0000 0x31000 C:\Windows\System32\cryptnet.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 11/12/2003 12:52:42 AM
mskeyprotect.dll 0x7ffa694f0000 0x15000 C:\Windows\SYSTEM32\mskeyprotect.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 3/31/1934 8:30:37 PM
iertutil.dll 0x7ffa695c0000 0x2be000 C:\Windows\SYSTEM32\iertutil.dll Microsoft Corporation 11.00.19041.1 (WinBuild.160101.0800) 6/15/2028 9:40:52 PM
Windows.Shell.ServiceHostBuilder.dll 0x7ffa69be0000 0x1d000 C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll Microsoft Corporation 10.0.19041.4355 (WinBuild.160101.0800) 1/31/1952 11:06:28 PM
System.Net.Http.WebRequest.ni.dll 0x7ffa69e50000 0xc000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Net.22cc68a8#\317293a96888df75a373e862af92c75e\System.Net.Http.WebRequest.ni.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:24:26 PM
MpOav.dll 0x7ffa69f90000 0x81000 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpOav.dll Microsoft Corporation 4.18.24080.9 (f49fb7de0d838aeebbdbd940314a35a90705840e) 8/17/1941 3:02:07 PM
webio.dll 0x7ffa6a0e0000 0x98000 C:\Windows\SYSTEM32\webio.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/29/2016 9:51:48 PM
ncryptsslp.dll 0x7ffa6a210000 0x26000 C:\Windows\system32\ncryptsslp.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 3/30/2007 2:53:40 PM
amsi.dll 0x7ffa6a2e0000 0x1f000 C:\Windows\SYSTEM32\amsi.dll Microsoft Corporation 10.0.19041.4355 (WinBuild.160101.0800) 4/13/1916 3:37:17 AM
wmiutils.dll 0x7ffa6a810000 0x28000 C:\Windows\system32\wbem\wmiutils.dll Microsoft Corporation 10.0.19041.3758 (WinBuild.160101.0800) 9/23/2000 4:35:44 PM
wbemsvc.dll 0x7ffa6a840000 0x14000 C:\Windows\system32\wbem\wbemsvc.dll Microsoft Corporation 10.0.19041.4474 (WinBuild.160101.0800) 3/28/1984 3:09:26 AM
fastprox.dll 0x7ffa6a860000 0x10c000 C:\Windows\system32\wbem\fastprox.dll Microsoft Corporation 10.0.19041.4355 (WinBuild.160101.0800) 5/17/2037 5:15:00 PM
wbemcomn.dll 0x7ffa6bd90000 0x90000 C:\Windows\SYSTEM32\wbemcomn.dll Microsoft Corporation 10.0.19041.4355 (WinBuild.160101.0800) 8/12/2032 5:55:56 PM
wbemprox.dll 0x7ffa6bf80000 0x11000 C:\Windows\system32\wbem\wbemprox.dll Microsoft Corporation 10.0.19041.4474 (WinBuild.160101.0800) 4/3/1961 4:36:57 PM
srvcli.dll 0x7ffa6bfa0000 0x28000 C:\Windows\SYSTEM32\srvcli.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 5/24/1965 12:19:26 PM
urlmon.dll 0x7ffa6bfd0000 0x1ec000 C:\Windows\SYSTEM32\urlmon.dll Microsoft Corporation 11.00.19041.3636 (WinBuild.160101.0800) 10/13/1927 10:45:24 PM
fwpuclnt.dll 0x7ffa6cbb0000 0x80000 C:\Windows\System32\fwpuclnt.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 10/24/1933 5:04:05 PM
mscorsecimpl.dll 0x7ffa6cd10000 0x21000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsecimpl.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:13:11 PM
wminet_utils.dll 0x7ffa6d280000 0x2f000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\wminet_utils.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:16:13 PM
System.Transactions.dll 0x7ffa6d2b0000 0x4f000 C:\Windows\Microsoft.Net\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 7:03:22 PM
System.EnterpriseServices.Wrapper.dll 0x7ffa6d340000 0x27000 C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll Microsoft Corporation 4.8.9037.0 built by: NET481REL1 6/24/2022 6:09:33 PM
rasapi32.dll 0x7ffa6d370000 0xff000 C:\Windows\SYSTEM32\rasapi32.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 10/19/1920 6:46:39 AM
rasadhlp.dll 0x7ffa6d4f0000 0xa000 C:\Windows\System32\rasadhlp.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 4/20/2020 5:03:06 PM
rasman.dll 0x7ffa6d6f0000 0x34000 C:\Windows\SYSTEM32\rasman.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 10/18/1907 3:55:39 AM
dhcpcsvc.DLL 0x7ffa6e300000 0x1d000 C:\Windows\SYSTEM32\dhcpcsvc.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 5/31/2028 6:01:04 PM
dhcpcsvc6.DLL 0x7ffa6e4b0000 0x17000 C:\Windows\SYSTEM32\dhcpcsvc6.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 9/7/1986 5:41:52 AM
WINNSI.DLL 0x7ffa6e500000 0xb000 C:\Windows\SYSTEM32\WINNSI.DLL Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 5/26/2019 10:40:57 AM
FLTLIB.DLL 0x7ffa6e570000 0xb000 C:\Windows\SYSTEM32\FLTLIB.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 6/17/1951 2:28:09 PM
winhttp.dll 0x7ffa6e580000 0x10d000 C:\Windows\SYSTEM32\winhttp.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 5/16/1931 5:16:54 AM
policymanager.dll 0x7ffa6e7b0000 0xa1000 C:\Windows\SYSTEM32\policymanager.dll Microsoft Corporation 10.0.19041.4597 (WinBuild.160101.0800) 5/18/1998 2:12:51 AM
NLAapi.dll 0x7ffa6e8e0000 0x1d000 C:\Windows\system32\NLAapi.dll Microsoft Corporation 10.0.19041.4123 (WinBuild.160101.0800) 9/6/2018 4:14:06 AM
clrjit.dll 0x7ffa6ec60000 0x12f000 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll Microsoft Corporation 4.8.9277.0 built by: NET481REL1LAST_B 8/29/2024 11:08:51 PM
rtutils.dll 0x7ffa6ef30000 0x16000 C:\Windows\SYSTEM32\rtutils.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 2/25/1993 12:09:20 PM
PROPSYS.dll 0x7ffa6fc50000 0xf6000 C:\Windows\SYSTEM32\PROPSYS.dll Microsoft Corporation 7.0.19041.3636 (WinBuild.160101.0800) 1/13/2005 5:27:46 PM
wintypes.dll 0x7ffa700f0000 0x157000 C:\Windows\SYSTEM32\wintypes.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 12/28/1919 10:36:50 AM
CoreUIComponents.dll 0x7ffa70730000 0x35b000 C:\Windows\System32\CoreUIComponents.dll Microsoft Corporation 10.0.19041.3636 8/20/1977 5:05:49 AM
CoreMessaging.dll 0x7ffa70c70000 0xf2000 C:\Windows\System32\CoreMessaging.dll Microsoft Corporation 10.0.19041.4355 5/3/2026 4:00:27 PM
WindowsCodecs.dll 0x7ffa71220000 0x1b6000 C:\Windows\SYSTEM32\WindowsCodecs.dll Microsoft Corporation 10.0.19041.4648 (WinBuild.160101.0800) 12/20/1940 6:10:33 PM
uxtheme.dll 0x7ffa71400000 0x9e000 C:\Windows\system32\uxtheme.dll Microsoft Corporation 10.0.19041.4529 (WinBuild.160101.0800) 7/29/2034 10:23:07 PM
kernel.appcore.dll 0x7ffa718f0000 0x12000 C:\Windows\SYSTEM32\kernel.appcore.dll Microsoft Corporation 10.0.19041.3758 (WinBuild.160101.0800) 1/28/2033 8:29:14 PM
windows.storage.dll 0x7ffa71af0000 0x7a4000 C:\Windows\SYSTEM32\windows.storage.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 6/11/1982 8:54:42 AM
gpapi.dll 0x7ffa722b0000 0x23000 C:\Windows\SYSTEM32\gpapi.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 2/29/1980 9:06:58 AM
VERSION.dll 0x7ffa72940000 0xa000 C:\Windows\SYSTEM32\VERSION.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 9/16/1967 3:52:12 AM
schannel.DLL 0x7ffa72960000 0x98000 C:\Windows\system32\schannel.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 6/24/1957 5:23:21 PM
rsaenh.dll 0x7ffa72a50000 0x34000 C:\Windows\system32\rsaenh.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 10/7/2010 7:34:55 PM
msvcp110_win.dll 0x7ffa72ae0000 0x8a000 C:\Windows\SYSTEM32\msvcp110_win.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 4/21/1944 4:26:32 AM
ntmarta.dll 0x7ffa72ca0000 0x33000 C:\Windows\SYSTEM32\ntmarta.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 1/20/1969 12:05:03 AM
IPHLPAPI.DLL 0x7ffa72e10000 0x3b000 C:\Windows\SYSTEM32\IPHLPAPI.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/23/1923 6:51:48 PM
DNSAPI.dll 0x7ffa72e50000 0xca000 C:\Windows\SYSTEM32\DNSAPI.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 6/14/1947 10:20:28 AM
netutils.dll 0x7ffa72f20000 0xc000 C:\Windows\SYSTEM32\netutils.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 5/3/1992 3:14:08 AM
mswsock.dll 0x7ffa73130000 0x6a000 C:\Windows\system32\mswsock.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 8/5/1955 11:36:57 PM
CRYPTBASE.dll 0x7ffa73320000 0xc000 C:\Windows\SYSTEM32\CRYPTBASE.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 3/12/2023 8:15:38 AM
CRYPTSP.dll 0x7ffa73330000 0x18000 C:\Windows\SYSTEM32\CRYPTSP.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 12/18/1949 8:49:33 PM
Wldp.dll 0x7ffa73430000 0x2e000 C:\Windows\SYSTEM32\Wldp.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 1/2/2000 12:54:26 PM
NTASN1.dll 0x7ffa73460000 0x3b000 C:\Windows\SYSTEM32\NTASN1.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/12/1932 1:13:38 PM
ncrypt.dll 0x7ffa734a0000 0x27000 C:\Windows\SYSTEM32\ncrypt.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 8/4/1960 1:03:31 PM
MSASN1.dll 0x7ffa735c0000 0x12000 C:\Windows\SYSTEM32\MSASN1.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 3/17/1987 12:04:36 PM
DPAPI.dll 0x7ffa737f0000 0xa000 C:\Windows\SYSTEM32\DPAPI.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 9/9/1927 8:42:08 PM
USERENV.dll 0x7ffa73920000 0x2e000 C:\Windows\SYSTEM32\USERENV.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 4/23/1913 10:31:40 PM
SSPICLI.DLL 0x7ffa73950000 0x32000 C:\Windows\SYSTEM32\SSPICLI.DLL Microsoft Corporation 10.0.19041.4239 (WinBuild.160101.0800) 3/11/2006 3:49:31 PM
profapi.dll 0x7ffa739a0000 0x24000 C:\Windows\SYSTEM32\profapi.dll Microsoft Corporation 10.0.19041.4355 (WinBuild.160101.0800) 6/6/1904 3:28:52 PM
msvcp_win.dll 0x7ffa73a70000 0x9d000 C:\Windows\System32\msvcp_win.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 5/19/2000 11:25:03 AM
gdi32full.dll 0x7ffa73bc0000 0x117000 C:\Windows\System32\gdi32full.dll Microsoft Corporation 10.0.19041.4957 (WinBuild.160101.0800) 4/12/1988 11:54:53 AM
crypt32.DLL 0x7ffa73ce0000 0x15c000 C:\Windows\System32\crypt32.DLL Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 1/26/2028 11:33:02 AM
CFGMGR32.dll 0x7ffa73e40000 0x4e000 C:\Windows\System32\CFGMGR32.dll Microsoft Corporation 10.0.19041.3996 (WinBuild.160101.0800) 5/31/1986 12:43:09 AM
bcrypt.dll 0x7ffa73e90000 0x27000 C:\Windows\System32\bcrypt.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 4/2/1914 10:51:47 PM
WINTRUST.dll 0x7ffa73ec0000 0x69000 C:\Windows\System32\WINTRUST.dll Microsoft Corporation 10.0.19041.4957 (WinBuild.160101.0800) 8/27/1946 10:38:03 PM
KERNELBASE.dll 0x7ffa73f30000 0x2fe000 C:\Windows\System32\KERNELBASE.dll Microsoft Corporation 10.0.19041.4842 (WinBuild.160101.0800) 9/15/1938 5:38:23 AM
bcryptPrimitives.dll 0x7ffa74230000 0x82000 C:\Windows\System32\bcryptPrimitives.dll Microsoft Corporation 10.0.19041.5007 (WinBuild.160101.0800) 10/8/1938 1:42:05 PM
win32u.dll 0x7ffa742c0000 0x22000 C:\Windows\System32\win32u.dll Microsoft Corporation 10.0.19041.5007 (WinBuild.160101.0800) 8/19/1939 5:18:50 PM
sechost.dll 0x7ffa743f0000 0xa0000 C:\Windows\System32\sechost.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 12/7/1999 2:18:49 PM
SHCORE.dll 0x7ffa74550000 0xad000 C:\Windows\System32\SHCORE.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/26/1905 7:43:22 PM
USER32.dll 0x7ffa747b0000 0x19d000 C:\Windows\System32\USER32.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 11/22/1969 9:40:52 PM
imagehlp.dll 0x7ffa74950000 0x1d000 C:\Windows\System32\imagehlp.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 12/26/2028 3:43:46 AM
ole32.dll 0x7ffa74970000 0x12b000 C:\Windows\System32\ole32.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 5/10/1989 2:39:34 AM
clbcatq.dll 0x7ffa74b30000 0xa9000 C:\Windows\System32\clbcatq.dll Microsoft Corporation 2001.12.10941.16384 (WinBuild.160101.0800) 2/4/1973 2:00:35 PM
NSI.dll 0x7ffa74be0000 0x8000 C:\Windows\System32\NSI.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 6/26/2029 5:59:28 PM
ADVAPI32.dll 0x7ffa74c50000 0xb2000 C:\Windows\System32\ADVAPI32.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 10/1/1971 6:46:28 PM
WS2_32.dll 0x7ffa74d10000 0x6b000 C:\Windows\System32\WS2_32.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 11/20/2034 9:24:12 PM
GDI32.dll 0x7ffa74e10000 0x2b000 C:\Windows\System32\GDI32.dll Microsoft Corporation 10.0.19041.4474 (WinBuild.160101.0800) 1/28/1949 1:53:11 AM
MSCTF.dll 0x7ffa74e40000 0x115000 C:\Windows\System32\MSCTF.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 3/21/1987 8:03:31 AM
SHLWAPI.dll 0x7ffa74f60000 0x55000 C:\Windows\System32\SHLWAPI.dll Microsoft Corporation 10.0.19041.1 (WinBuild.160101.0800) 7/4/2026 7:16:23 PM
msvcrt.dll 0x7ffa74fc0000 0x9e000 C:\Windows\System32\msvcrt.dll Microsoft Corporation 7.0.19041.3636 (WinBuild.160101.0800) 10/25/1916 5:10:28 AM
shell32.dll 0x7ffa75060000 0x76f000 C:\Windows\System32\shell32.dll Microsoft Corporation 10.0.19041.4957 (WinBuild.160101.0800) 11/1/1930 3:20:14 AM
OLEAUT32.dll 0x7ffa757d0000 0xcd000 C:\Windows\System32\OLEAUT32.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 9/15/1946 10:28:01 AM
RPCRT4.dll 0x7ffa758a0000 0x123000 C:\Windows\System32\RPCRT4.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 11/19/2033 2:03:39 PM
combase.dll 0x7ffa75e40000 0x353000 C:\Windows\System32\combase.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 2/8/1957 10:35:21 AM
IMM32.DLL 0x7ffa761a0000 0x2f000 C:\Windows\System32\IMM32.DLL Microsoft Corporation 10.0.19041.4474 (WinBuild.160101.0800) 2/22/1945 12:26:46 PM
KERNEL32.dll 0x7ffa761d0000 0xc2000 C:\Windows\System32\KERNEL32.dll Microsoft Corporation 10.0.19041.4842 (WinBuild.160101.0800) 10/25/1920 9:07:35 PM
psapi.dll 0x7ffa762a0000 0x8000 C:\Windows\System32\psapi.dll Microsoft Corporation 10.0.19041.3636 (WinBuild.160101.0800) 11/5/2013 5:34:37 AM
ntdll.dll 0x7ffa763d0000 0x1f8000 C:\Windows\SYSTEM32\ntdll.dll Microsoft Corporation 10.0.19041.4842 (WinBuild.160101.0800) 8/3/2025 12:20:27 PM

9

Duplicati people probably can’t support Windows drivers. Please ask whoever provided yours.

GetNamedSecurityInfoW function (aclapi.h) (Microsoft) does what its name suggests. Maybe

store-metadata Duplicati option which

Stores metadata, such as file timestamps and attributes. This increases the required storage space as well as the processing time.

which defaults to true might avoid at least some of these queries if set to false on a test backup, however please test it well (including restore) to make sure its results are enough for your need.

EDIT:

From your other issue, this might be where you found the problem, but info is not enough to say:

10

I don’t understand the first sentence. You requested a copy of the log files to debug this issue. That I did. Not that the source server (a netware server) has many more file permissions than Linux or windows and in some cases permissions that don’t line up with either.)

As for a restore test, It would be helpful to determine HOW I could so a test restore to a different volume or folder to test this. Please advise. Thank you!

11

And, how do I pick the option you suggested? I only have a limited set of options that I can choose in the program. Thanks.

12

Unfortunately the option is not in the second set of advanced options. Please advise how I can set the “store-metadata” option (or clear it)., Thanks!

13

I think this should be “Skip-Metadata” option and NOT “Store-Metadata” as mentioned in the post above. Please confirm. Thanks!

14

and the report is

which suggests it’s not in Duplicati. Duplicati is just affected.
Debugging involves figuring out where the problem may be.
In this case, it’s between your Windows driver and a remote.

Please see the manual. Restoring files from a backup shows how to pick a restore location:

image
image710×266 11.4 KB

If you choose not to backup permissions, as workaround, restore can’t restore permissions.

image

possibly suppresses a full permission restore anyway. How do you usually do your restore?

Restoring files if your Duplicati installation is lost is probably a better but harder test though.

If you never test something like disaster recovery, you may be surprised if a disaster occurs.

skip-metadata is the one that actually is known in the help command and has the same idea:

C:\Duplicati\duplicati-2.0.8.1_beta_2024-05-07>Duplicati.CommandLine.exe help skip-metadata
  --skip-metadata (Boolean): Don't store metadata
    Use this option to disable the storage of metadata, such as file
    timestamps. Disabling metadata storage will speed up the backup and
    restore operations, but does not affect file size much.
    * default value: false

and the reversal of action might have been to keep the default false, as is generally the plan.

About → Changelog shows this:

2018-08-30 - 2.0.3.10_canary_2018-08-30
...
* Removed the `--store-metadata` option

but manual documents both. The manual in general could use some attention to get it current.

TL;DR on question is that the current idea is that skip-metadata defaults false, so check it true:

image
image956×180 13.1 KB

15

Another workaround for whatever’s going wrong in your non-Duplicati driver or the remote system might be to access the remote using some intermediary in an attempt to avoid troublesome query.

As I understand it, your third-party Windows driver provides a Windows interface that usually runs. Sharing it over SMB from the backup system to the same system might change the behavior while allowing basic metadata to get through. Again it depends a bit on how much the metadata matters.

The detailed directions for Windows SMB setup can likely be found at many places on the Internet.

This is all a guesswork workaround for your system failure. Your driver vendor might know more…

16

You actually have two styles of warnings, but one step at a time. The metadata idea is based on

so if you click link and read above, you can see it trying to read metadata, so we try to stop that.

The “Could not find a part of the path” warning might be something else wrong in the third-party code, however I don’t think you were able to locate any clue on that failure with Process Monitor.

17

If your remote supports SMB (I don’t know – do you?), that’s another less weird SMB path to try. Possibly getting it to Windows that way will work. Or maybe you can get Duplicati on the remote.

18

Thanks. I have always suggested that the code does not take into account extended file attributes and extended file system responses from some network clients. For example, if you live in a linux world, all you get is 777 and system account and user account. With a windows server, file permissions with a netware (Microfocus OES client Client for Open Enterprise Server 2 SP7 (IR3)) you can get more attributes than what you would expect to write to the storage server. And these would be more than what you would expect from SMB or CFS. The other issue may be delayed read file response time especially for files that have to be decompressed. But the log file did not show any file system errors between the computer running duplicati. and the fileserver. So I back to my original suggestion that extended file status and attributes are causing the errors. Thanks for your time!

19

Possibly, but it’s probably not in Duplicati, so the only Duplicati option is to seek workarounds.

Quoting you, this has no response. If .NET can’t handle, Duplicati using .NET might not either:

What do you mean by .NET, if you know? Both PowerShell and Duplicati .NET versions may vary.
.NET Framework is rather stagnant, but I “think” default PowerShell runs it. Duplicati 2.0.8.1 does.

Duplicati 2.0.9.x (now in Canary test releases) uses .NET 8 which is multiple years more updated. Canary releases are usually not advised for production, but maybe you can try it on a test system.

20

If you wanted to see that, you’d go see if Wireshark can decode the on-network protocol for you.

Process Monitor AFAIK only sees Windows activity, not any network activity between computers.

You would prefer someone familiar with Windows drivers. Duplicati provides no Windows drivers.

Again, this is out of scope, but let’s look to see what driver is actually complaining about things…

Filter Manager Concepts explains FltMgr.sys as a Windows driver, so maybe it’s not your add-on which possibly is below that, but your driver software vendor ought to know how the driver works.

Start close to where the problem is, and the problem seems to be a complaint from filter manager about something from above, and the highest visible thing is mscorlib.ni.dll, so there’s no visibility even into .NET Framework, and Duplicati is above that. From one quick web search, I’m hearing:

What is mscorlib.ni.dll? says it’s part of .NET Framework. I don’t know if .NET 8 uses that as well, meaning possibly Duplicati 2.0.9.x Canary will show some other thing on its stack – or may work.

Only you can test with your system. For code or support, Duplicati people specialize in Duplicati.