Jump to content
Welcome to our new Citrix community!
  • 0

SSO still prompting for Password


Michael Borek

Question

Hello, 

 

we can't SSO with various different Versions of Citrix Receiver. I can't find the reason for that, the only suspicious thing i could find was: 

 

16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:460 -Embedding'.
16/07/2018 08:06:16  7532    StoreLaunchedProcessHandle() 
16/07/2018 08:06:16  7532    StoreLaunchedProcessHandle() Saved handle 860 to AUTHMAN process with PID 11372
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 08:06:16  7532    DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:16  7532    SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:18  7532    SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:06:18  7532    DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:18  7532    SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:18  7532    SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:19  7532    SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:06:19  7532    DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:19  7532    SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:19  7532    SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:23  7532    SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:06:23  7532    DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:23  7532    SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:23  7532    SSONRequestBrokerThread_InnerLoop() 

 

Anybody knows how to find out, what kind of message it is receiving?

 

Thx forward!

Link to comment

17 answers to this question

Recommended Posts

  • 1

Hi, 

Thanks for the logs.

Upon analysis of logs it seems all the configurations are proper, but Authentication is failing. This can happen if Client machine and Storefront are on different domain.

Can you please confirm that in your case client machine and storefront are in same domain? and your system credentials are accepted by storefront? if not than this is an expected scenario.

 

Thanks & Regards

Puneet 

  • Like 1
Link to comment
  • 0

I activated some more logs and found some interesting things, but i still have no clue:

 

17/11:33:13 web        T100    :CurrentCulture Name: de-DE
17/11:33:13 web        T100    :GetErrPageLink: Error Link: C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\Error.html#locale=de
17/11:33:13 web        T100    :Setting DPI AWARE Flag
17/11:33:13 dservice E T101    :    AuthManager Exception in GetResponse(): AuthManager needed to prompt the user for logon to complete the request but it was prevented by the request AuthenticationFlags property. Set the AllowLogon + Interactive flags to allow logon with user prompts.
17/11:33:13 dservice ? T101    :  }00:00:00.6134662
17/11:33:13 dservice   T101    :  Delivery Services request requires authentication: Unauthorized https://mydomain/Citrix/XenDesktopWeb/CitrixAuth/Login <no type> (0 bytes)
17/11:33:13 authman    T101    :  LazyInitAuthManagerConnection, DecreaseUsage Usage = 1
17/11:33:13 dservice E T101    :  Request failed with HTTP code Unauthorized from service at https://mydomain/Citrix/XenDesktopWeb/CitrixAuth/Login
17/11:33:13 dservice E T101    :  GetCookies request failed with HTTP code Unauthorized from service at https://mydomain/Citrix/XenDesktopWeb/CitrixAuth/Login
17/11:33:13 web      = T101    :  EnsureResourcesAreLoaded offline = True
17/11:33:13 web      > T101    :  {
17/11:33:13 bg       ? T101    :    AddtoHighPriorityQueue
17/11:33:13 bg       > T101    :    {
17/11:33:13 bg         T101    :      +:ExtendedRefresh
  
  
  17/09:26:25 dservice E T100    :  AuthManager Exception in GetResponse(): AuthManager needed to prompt the user for logon to complete the request but it was prevented by the request AuthenticationFlags property. Set the AllowLogon + Interactive flags to allow logon with user prompts.
17/09:26:25 dservice ? T100    :}00:00:00.7197964
17/09:26:25 dservice   T100    :Delivery Services request requires authentication: Unauthorized https://mydomain/Citrix/XenDesktopAuth/auth/v1/token/validate/ <no type> (0 bytes)
17/09:26:25 authman    T100    :LazyInitAuthManagerConnection, DecreaseUsage Usage = 1
17/09:26:25 dservice E T100    :Request failed with HTTP code Unauthorized from service at https://mydomain/Citrix/XenDesktopAuth/auth/v1/token/validate/
17/09:26:25 dservice E T100    :Token Validation request failed with HTTP code Unauthorized from service at https://mydomain/Citrix/XenDesktopAuth/auth/v1/token/validate/
17/09:26:25 dservice E T100    :Failed to obtain user info from provider CredProb=BadCredentials
17/09:26:25 dservice E T100    :Request failed: Credentials error
17/09:26:25 dservice E T100    :   bei Dazzle.DeliveryServicesClient.DeliveryServices.DeliveryServicesSet.GetUserInfo(Boolean allowCredUi, String displayName, Uri tokenValidationServiceUrl)
17/09:26:25 dservice E T100    :   bei Dazzle.DeliveryServicesClient.Provider.GetUserInfo(Boolean allowCredUi)
17/09:26:25 misc       T100    :No user is loggedon.
17/09:26:25 misc       T100    :Desktop Lock: Desktop Lock Configured: No IsUserAdmin True
17/09:26:25 misc     = T100    :ProcessCommandLine 
 
  
  Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018       : ConnectionTable::SetData_ExclusiveLock: Stored AuthManager with handle 2 and GIT cookie 769
Tue Jul 17 09:38:10 2018       : CreateConnection created auth manager with handle 2
Tue Jul 17 09:38:10 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 3 and GIT cookie 1026
Tue Jul 17 09:38:10 2018       : CreateAMHttpRequest created request with handle 3
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018       : SendAndReceive completed for handle 3
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018       : GetResponseStatusCode completed for handle 3 with result 200
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018       : ReadResponseBodyStream read 627 bytes
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
Tue Jul 17 09:38:10 2018       : ReadResponseBodyStream read 0 bytes
Tue Jul 17 09:38:10 2018 Wrn   : CoAllowSetForegroundWindow failed with HResult 2147942405
 
  
Tue Jul 17 08:13:57 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 5
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 6 and GIT cookie 1538
Tue Jul 17 08:22:04 2018       : CreateAMHttpRequest created request with handle 6
Tue Jul 17 08:22:04 2018       : SendAndReceive completed for handle 6
Tue Jul 17 08:22:04 2018       : GetResponseStatusCode completed for handle 6 with result 200
Tue Jul 17 08:22:04 2018       : GetResponseHeaders completed for handle 6
Tue Jul 17 08:22:04 2018       : ReadResponseBodyStream read 982 bytes
Tue Jul 17 08:22:04 2018       : ReadResponseBodyStream read 0 bytes
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 7 and GIT cookie 1284
Tue Jul 17 08:22:04 2018       : CreateAMHttpRequest created request with handle 7
Tue Jul 17 08:22:04 2018       : SendAndReceive completed for handle 7
Tue Jul 17 08:22:04 2018       : GetResponseStatusCode completed for handle 7 with result 200
Tue Jul 17 08:22:04 2018       : GetResponseHeaders completed for handle 7
Tue Jul 17 08:22:04 2018       : ReadResponseBodyStream read 658 bytes
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 7
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 7
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 7
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 4
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 4
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 4
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 6
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 6
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 6
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 8 and GIT cookie 1794
Tue Jul 17 08:22:04 2018       : CreateAMHttpRequest created request with handle 8
Tue Jul 17 08:22:04 2018 Err   : CitrixAuthManagerSDK::AMImplementationV5::SendRequestAndReceiveResponse: caught COM error 2147746566
Tue Jul 17 08:22:04 2018       : SendAndReceive completed for handle 8 with AMResult 65273
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 8
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 8
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 8
Tue Jul 17 08:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 9 and GIT cookie 2050
Tue Jul 17 08:22:04 2018       : CreateAMHttpRequest created request with handle 9
Tue Jul 17 08:22:05 2018 Err   : CitrixAuthManagerSDK::AMImplementationV5::SendRequestAndReceiveResponse: caught COM error 2147746566
Tue Jul 17 08:22:05 2018       : SendAndReceive completed for handle 9 with AMResult 65273
Tue Jul 17 08:22:05 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 9
Tue Jul 17 08:22:05 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 9
Tue Jul 17 08:22:05 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 9
Tue Jul 17 09:20:56 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 10 and GIT cookie 2306
Tue Jul 17 09:20:56 2018       : CreateAMHttpRequest created request with handle 10
Tue Jul 17 09:20:57 2018       : OnStatusChangeCallback: Called with handle(1) status(1) window(1443770)
Tue Jul 17 09:20:57 2018       : OnStatusChangeCallback:  Making callback for handle(1) status(1) window(1443770)
Tue Jul 17 09:20:57 2018       : OnStatusChangeCallback:  Returned from callback
Tue Jul 17 09:21:01 2018       : OnStatusChangeCallback: Called with handle(1) status(2) window(0)
Tue Jul 17 09:21:01 2018       : OnStatusChangeCallback:  Making callback for handle(1) status(2) window(0)
Tue Jul 17 09:21:01 2018       : OnStatusChangeCallback:  Returned from callback
Tue Jul 17 09:21:01 2018       : SendAndReceive completed for handle 10
Tue Jul 17 09:21:01 2018       : GetResponseStatusCode completed for handle 10 with result 200
Tue Jul 17 09:21:01 2018       : GetResponseHeaders completed for handle 10
Tue Jul 17 09:21:01 2018       : ReadResponseBodyStream read 289 bytes
Tue Jul 17 09:21:01 2018       : ReadResponseBodyStream read 1248 bytes
Tue Jul 17 09:21:01 2018       : ReadResponseBodyStream read 0 bytes
Tue Jul 17 09:21:01 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 11 and GIT cookie 1539
Tue Jul 17 09:21:01 2018       : CreateAMHttpRequest created request with handle 11
Tue Jul 17 09:21:02 2018       : SendAndReceive completed for handle 11
Tue Jul 17 09:21:02 2018       : GetResponseStatusCode completed for handle 11 with result 200
Tue Jul 17 09:21:02 2018       : GetResponseHeaders completed for handle 11
Tue Jul 17 09:21:02 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 10
Tue Jul 17 09:21:02 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 10
Tue Jul 17 09:21:02 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 10
Tue Jul 17 09:21:02 2018       : ReadResponseBodyStream read 1232 bytes
Tue Jul 17 09:21:02 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 12 and GIT cookie 2562
Tue Jul 17 09:21:02 2018       : CreateAMHttpRequest created request with handle 12
Tue Jul 17 09:21:02 2018       : SendAndReceive completed for handle 12
Tue Jul 17 09:21:02 2018       : GetResponseStatusCode completed for handle 12 with result 200
Tue Jul 17 09:21:02 2018       : GetResponseHeaders completed for handle 12
Tue Jul 17 09:21:02 2018       : ReadResponseBodyStream read 138 bytes
Tue Jul 17 09:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 13 and GIT cookie 2312
Tue Jul 17 09:22:04 2018       : CreateAMHttpRequest created request with handle 13
Tue Jul 17 09:22:04 2018       : SendAndReceive completed for handle 13
Tue Jul 17 09:22:04 2018       : GetResponseStatusCode completed for handle 13 with result 200
Tue Jul 17 09:22:04 2018       : GetResponseHeaders completed for handle 13
Tue Jul 17 09:22:04 2018       : ReadResponseBodyStream read 982 bytes
Tue Jul 17 09:22:04 2018       : ReadResponseBodyStream read 0 bytes
Tue Jul 17 09:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 14 and GIT cookie 2569
Tue Jul 17 09:22:04 2018       : CreateAMHttpRequest created request with handle 14
Tue Jul 17 09:22:04 2018       : SendAndReceive completed for handle 14
Tue Jul 17 09:22:04 2018       : GetResponseStatusCode completed for handle 14 with result 200
Tue Jul 17 09:22:04 2018       : GetResponseHeaders completed for handle 14
Tue Jul 17 09:22:04 2018       : ReadResponseBodyStream read 658 bytes
Tue Jul 17 09:22:04 2018       : AMHttpRequestTable::Set_ExclusiveLock: Stored object with handle 15 and GIT cookie 2826
Tue Jul 17 09:22:04 2018       : CreateAMHttpRequest created request with handle 15
Tue Jul 17 09:22:04 2018       : SendAndReceive completed for handle 15
Tue Jul 17 09:22:04 2018       : GetResponseStatusCode completed for handle 15 with result 200
Tue Jul 17 09:22:04 2018       : GetResponseHeaders completed for handle 15
Tue Jul 17 09:22:04 2018       : AMHttpRequestTable::Delete_ExclusiveLock called for handle 11
Tue Jul 17 09:22:04 2018       : AMHttpRequestTable::Delete_NoLock starts for handle 11
Tue Jul 17 09:22:04 2018       : ReadResponseBodyStream read 2507 bytes
Tue Jul 17 09:22:04 2018       : AMHttpRequestTable::Delete_NoLock completed ok for handle 11

 

Link to comment
  • 0

Hey,

nope. Still got no solution. But we have this issue since years now. No one batted an eye because 90% of our users work over xendesktop where everything works as expected. All other fat clients still have to enter password. They could safe the Password if you check the saving button, but thats not how signing in was planned. I really have to say, that resolving this issue without deeper knowledge of citrix s***s  very hard. I can't find a single sign without turning on debugging level on every service and thats pretty annoying. I think I might have to turn on Wireshark to filter specific events, but I am no professional packet analyzer...  Even these debug traces are no real help if you haven't programmed citrix yourself. I mean why are there no logs on DDC site that some kind of say that there might something not work with sso on several clients. 

Link to comment
  • 0

Issue solved:

 

activated on all DDCs Basic-HTTP and had to add a registry key on my client:

 

On 64-bit Windows

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\AuthManager\Protocols\httpbasic

Name: Enabled

Type: REG_SZ

Data: True

On 32-bit Windows

HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\AuthManager\Protocols\httpbasic

Name: Enabled

Type: REG_SZ

Data: True

 

 

I have to say, my complaining about troubleshooting isn't that wrong. I walked in circles because the lack of documentation. This sentence stucked in my head "Set the AllowLogon + Interactive flags to allow logon with user prompts.". It's nowhere mentioned how to activate that, or it has something to do with http-basic.

 

If I should rate citrix, I would give the Software 4 Stars and the Documentation 3 Stars. There are many support pages which explain some basic settings and common issues, but I miss some detailed documentation for troubles like this. I could have save days to solve this problem if there would be a better documentation.

Link to comment
  • 0

Hi,

Can you please share the AuthManager logs and SSON logs.

For Enabling/Collecting AuthManager logs please use : https://support.citrix.com/article/CTX132883, You will be required to restart the receiver after enabling setting mentioned on this link.

For Enabling/Collecting SSON logs please use : https://support.citrix.com/article/CTX206102, you will be required to restart the system after enabling the settings mentioned on this link.

 

Thanks & Regards

Puneet Kumar Birwa

Link to comment
  • 0

Hello @Puneet Kumar Birwa,

 

I already had logging enabled. Since It's working "unsecured" over http-basic, its hard to reproduce it without disabling my GPO including the Registry-Key to allow basic-http authentication. So I will try to paste the original Logs from before enabling basic-http

 

When i enabled logging, I recognized, that Authmanager shouted permanently: 

 


Time: Fri Jul 13 10:28:40 2018 UTC
LocalTime: Fri Jul 13 12:28:40 2018
Type: Warning
Module: Citrix Authentication Manager
Location: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE
Version: 12.2.0.18007 (Release)
Platform: Windows 10.0.9200 64-bit  SP Version: 0.0 SuiteMask: 256 ProductType: 1 IE: 11.165.17134.0
Description: Domain pass-through authentication appeared to fail due to the internet settings on this computer. Domain pass-through requires automatic logon to be enabled for the site's Security Zone in Internet Options but the service at 'https-url-withheld' is in the 'Vertrauenswürdige Sites' zone and the logon policy for that zone is 'Automatic logon only in Intranet zone'. If the site is trusted then domain pass-through can be enabled as follows:
Either
  1) add the site to the 'Local Intranet' zone and set the 'User Authentication|Logon' setting for the zone to 'Automatic logon only in Intranet zone' or 'Automatic logon with current user name and password'.
Or
  2) add the site to the 'Trusted sites' zone and set the 'User Authentication|Logon' setting for the zone to 'Automatic logon with current user name and password'.
For help with diagnostics, point Internet Explorer to https-url-withheld url>/Citrix/Authentication/Integrated/test.aspx
URLs have been stripped from this log message. To allow URLs in the log, set the logging mode to 'verbose'.

I checked multiple times this setting and it all is set as supposed to. But when I try to open the test.aspx, I receive following error: 

 


Server Error in '/' Application.

The resource cannot be found. 
  Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable.  Please review the following URL and make sure that it is spelled correctly. 

 Requested URL: /Citrix/Authentication/Integrated/test.aspx

When I connect to our Citrix Storefront over Internet Explorer, it asks me "do you want to use the current account you are currently signed in with? Please press login" After pressing login, I have to enter my credentials.

 

 

trace-ssonsvr.log

16/07/2018 07:51:40    -	WinMain() 
16/07/2018 07:51:40    -	WinMain() Initializing ssonsvr.
16/07/2018 07:51:40    -	IsUserSYSTEM() 
16/07/2018 07:51:40    -	IsUserSYSTEM() Result: 1.
16/07/2018 07:51:40    -	TerminationManager() 
16/07/2018 07:51:40    -	TerminationManager() Command line is NOT /TERMINATE.
16/07/2018 07:51:40    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7512.
16/07/2018 07:51:40    -	IsSSOnEnabled() 
16/07/2018 07:51:40  7512	WaitToTerminate() 
16/07/2018 07:51:40    -	IsSSOnPolicyEnabled() 
16/07/2018 07:51:40    -	IsRegistryKeySetTo() Return: retVal: 0.
16/07/2018 07:51:40    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
16/07/2018 07:51:40    -	IsSmartCardLogon() 
16/07/2018 07:51:40    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
16/07/2018 07:51:40    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:460 /LUID:0000000000099F02.
16/07/2018 07:51:40    -	WinMain() Found the LUID parameter.
16/07/2018 07:51:40    -	WinMain() ullLuid: 0x0000000000099F02.
16/07/2018 07:51:40    -	SSOn_GetCredentials() 
16/07/2018 07:51:40    -	ExtractCredentialsFromHtc() 
16/07/2018 07:51:40    -	ExtractCredentialsFromHtc() Success = 1.
16/07/2018 07:51:40    -	SSOn_GetCredentials() Retrieved data of type '1'
16/07/2018 07:51:40    -	WinMain() Got semaphore.
16/07/2018 07:51:40    -	ConstructAclForObj() 
16/07/2018 07:51:40    -	GetProcessOwnerToken() 
16/07/2018 07:51:40    -	GetProcessOwnerToken() Creating local owner SID.
16/07/2018 07:51:40    -	GetProcessOwnerToken() Opened the current process.
16/07/2018 07:51:40    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
16/07/2018 07:51:40    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
16/07/2018 07:51:40    -	GetProcessOwnerToken() Got the buffer.
16/07/2018 07:51:40    -	GetProcessOwnerToken() Successfully acquired process owner's token.
16/07/2018 07:51:40    -	GetProcessOwnerToken() Return: 000F3DD0.
16/07/2018 07:51:40    -	ConstructAclForObj() Got pTokenOwner.
16/07/2018 07:51:40    -	ConstructAclForObj() Got Owner SID
16/07/2018 07:51:40    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
16/07/2018 07:51:40    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
16/07/2018 07:51:40    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
16/07/2018 07:51:40    -	ConstructAclForObj() Return. Success: 1
16/07/2018 07:51:40    -	WinMain() Got ACL.
16/07/2018 07:51:40    -	CreateSSONRequestBrokerThread() 
16/07/2018 07:51:40    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 7532.
16/07/2018 07:51:40    -	CreateSSONPasswordChangeThread() 
16/07/2018 07:51:40  7532	SSONRequestBrokerThread() 
16/07/2018 07:51:40    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7556.
16/07/2018 07:51:40  7532	GetFullInstallPath() 
16/07/2018 07:51:40    -	CreateSSONCredInjectionThread() 
16/07/2018 07:51:40  7556	SSONPasswordChangeThread() 
16/07/2018 07:51:40    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 7560.
16/07/2018 07:51:40    -	WinMain() Found the Imm32.dll library.
16/07/2018 07:51:40  7560	SSONCredInjectionThread() 
16/07/2018 07:51:40  7556	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
16/07/2018 07:51:40    -	WinMain() IME attachment disabled successfully.
16/07/2018 07:51:40  7560	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
16/07/2018 07:51:40  7556	SSONPasswordChangeThread() Start named pipe service loop.
16/07/2018 07:51:40  7560	SSONCredInjectionThread() Enter named pipe handler loop.
16/07/2018 07:51:40    -	WinMain() Signal pnsson.
16/07/2018 07:51:40  7532	BuildSecurityAttributesForUser() 
16/07/2018 07:51:40  7532	ConstructAclForObj() 
16/07/2018 07:51:40  7532	GetProcessOwnerToken() 
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Creating local owner SID.
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Opened the current process.
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Opened the current process token. Get the token info.
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Got the buffer.
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Successfully acquired process owner's token.
16/07/2018 07:51:40  7532	GetProcessOwnerToken() Return: 0010D380.
16/07/2018 07:51:40  7532	ConstructAclForObj() Got pTokenOwner.
16/07/2018 07:51:40  7532	ConstructAclForObj() Got Owner SID
16/07/2018 07:51:40  7532	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
16/07/2018 07:51:40  7532	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
16/07/2018 07:51:40  7532	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
16/07/2018 07:51:40  7532	ConstructAclForObj() Return. Success: 1
16/07/2018 07:51:40  7532	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
16/07/2018 07:51:40  7532	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
16/07/2018 07:51:40  7532	SSONRequestBrokerThread() Pipe created. Handle messages now.
16/07/2018 07:51:40  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:460 -Embedding'.
16/07/2018 07:52:01  7532	StoreLaunchedProcessHandle() 
16/07/2018 07:52:01  7532	StoreLaunchedProcessHandle() Saved handle 792 to AUTHMAN process with PID 11540
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 07:52:01  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 07:52:01  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 07:52:03  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 07:52:03  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 07:52:03  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 07:52:03  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 07:52:04  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 07:52:04  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 07:52:04  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 07:52:04  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:460 -Embedding'.
16/07/2018 07:52:09  7532	StoreLaunchedProcessHandle() 
16/07/2018 07:52:09  7532	StoreLaunchedProcessHandle() Saved handle 756 to WFCRUN process with PID 13540
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 07:52:09  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 07:52:09  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 07:57:43  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 07:57:43  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 07:57:43  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 07:57:43  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 07:57:44  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 07:57:44  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 07:57:44  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 07:57:44  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:460 -Embedding'.
16/07/2018 08:00:48  7532	StoreLaunchedProcessHandle() 
16/07/2018 08:00:48  7532	StoreLaunchedProcessHandle() Saved handle 836 to AUTHMAN process with PID 5628
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 08:00:48  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:00:48  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:00:50  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:00:50  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:00:50  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:00:50  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:00:51  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:00:51  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:00:51  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:00:51  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:00:53  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:00:53  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:00:53  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:00:53  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:460 -Embedding'.
16/07/2018 08:06:11  7532	StoreLaunchedProcessHandle() 
16/07/2018 08:06:11  7532	StoreLaunchedProcessHandle() Saved handle 792 to WFCRUN process with PID 8952
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 08:06:11  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:11  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:460 -Embedding'.
16/07/2018 08:06:16  7532	StoreLaunchedProcessHandle() 
16/07/2018 08:06:16  7532	StoreLaunchedProcessHandle() Saved handle 860 to AUTHMAN process with PID 11372
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 08:06:16  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:16  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:18  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:06:18  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:18  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:18  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:19  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:06:19  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:19  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:19  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:06:23  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:06:23  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:06:23  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:06:23  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:460 -Embedding'.
16/07/2018 08:13:57  7532	StoreLaunchedProcessHandle() 
16/07/2018 08:13:57  7532	StoreLaunchedProcessHandle() Saved handle 796 to WFCRUN process with PID 2828
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 08:13:57  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:13:57  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:20:36  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:20:36  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:20:36  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:20:36  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:20:37  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:20:37  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:20:37  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:20:37  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() Received launch request
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() File verified.
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:460 -Embedding'.
16/07/2018 08:25:21  7532	StoreLaunchedProcessHandle() 
16/07/2018 08:25:21  7532	StoreLaunchedProcessHandle() Saved handle 892 to AUTHMAN process with PID 3300
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
16/07/2018 08:25:21  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:25:21  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:25:23  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:25:23  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:25:23  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:25:23  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:25:24  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:25:24  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:25:24  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:25:24  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:25:27  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:25:27  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:25:27  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:25:27  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 08:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 08:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 08:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 08:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 09:15:25  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 09:15:25  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 09:15:25  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 09:15:25  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 09:15:29  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 09:15:29  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 09:15:29  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 09:15:29  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 09:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 09:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 09:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 09:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 10:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 10:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 10:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 10:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 11:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 11:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 11:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 11:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 12:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 12:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 12:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 12:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 13:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 13:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 13:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 13:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 14:40:13  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 14:40:13  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 14:40:13  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 14:40:13  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 15:40:14  7532	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
16/07/2018 15:40:14  7532	DisconnectPipeAndCloseHandles() 
16/07/2018 15:40:14  7532	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
16/07/2018 15:40:14  7532	SSONRequestBrokerThread_InnerLoop() 
16/07/2018 16:22:07    -	MyWndProc() MyWndProc: WM_QUERYSESSION
16/07/2018 16:22:07    -	MyWndProc() MyWndProc: WM_ENDSESSION
16/07/2018 16:22:07    -	WinMain() SsonSvr.exe Exiting
17/07/2018 06:47:41    -	WinMain() 
17/07/2018 06:47:41    -	WinMain() Initializing ssonsvr.
17/07/2018 06:47:41    -	IsUserSYSTEM() 
17/07/2018 06:47:41    -	IsUserSYSTEM() Result: 1.
17/07/2018 06:47:41    -	TerminationManager() 
17/07/2018 06:47:41    -	TerminationManager() Command line is NOT /TERMINATE.
17/07/2018 06:47:41    -	TerminationManager() WaitToTerminate thread created. ThreadID: 6304.
17/07/2018 06:47:41    -	IsSSOnEnabled() 
17/07/2018 06:47:41  6304	WaitToTerminate() 
17/07/2018 06:47:41    -	IsSSOnPolicyEnabled() 
17/07/2018 06:47:41    -	IsRegistryKeySetTo() Return: retVal: 0.
17/07/2018 06:47:41    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
17/07/2018 06:47:41    -	IsSmartCardLogon() 
17/07/2018 06:47:41    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
17/07/2018 06:47:41    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000000B1699.
17/07/2018 06:47:41    -	WinMain() Found the LUID parameter.
17/07/2018 06:47:41    -	WinMain() ullLuid: 0x00000000000B1699.
17/07/2018 06:47:41    -	SSOn_GetCredentials() 
17/07/2018 06:47:41    -	ExtractCredentialsFromHtc() 
17/07/2018 06:47:41    -	ExtractCredentialsFromHtc() Success = 1.
17/07/2018 06:47:41    -	SSOn_GetCredentials() Retrieved data of type '1'
17/07/2018 06:47:41    -	WinMain() Got semaphore.
17/07/2018 06:47:41    -	ConstructAclForObj() 
17/07/2018 06:47:41    -	GetProcessOwnerToken() 
17/07/2018 06:47:41    -	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 06:47:41    -	GetProcessOwnerToken() Opened the current process.
17/07/2018 06:47:41    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 06:47:41    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 06:47:41    -	GetProcessOwnerToken() Got the buffer.
17/07/2018 06:47:41    -	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 06:47:41    -	GetProcessOwnerToken() Return: 000E4FC0.
17/07/2018 06:47:41    -	ConstructAclForObj() Got pTokenOwner.
17/07/2018 06:47:41    -	ConstructAclForObj() Got Owner SID
17/07/2018 06:47:41    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 06:47:41    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 06:47:41    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 06:47:41    -	ConstructAclForObj() Return. Success: 1
17/07/2018 06:47:41    -	WinMain() Got ACL.
17/07/2018 06:47:41    -	CreateSSONRequestBrokerThread() 
17/07/2018 06:47:41    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 1200.
17/07/2018 06:47:41    -	CreateSSONPasswordChangeThread() 
17/07/2018 06:47:41  1200	SSONRequestBrokerThread() 
17/07/2018 06:47:41    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 6264.
17/07/2018 06:47:41  1200	GetFullInstallPath() 
17/07/2018 06:47:41    -	CreateSSONCredInjectionThread() 
17/07/2018 06:47:41  6264	SSONPasswordChangeThread() 
17/07/2018 06:47:41    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 6092.
17/07/2018 06:47:41    -	WinMain() Found the Imm32.dll library.
17/07/2018 06:47:41    -	WinMain() IME attachment disabled successfully.
17/07/2018 06:47:41  6264	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
17/07/2018 06:47:41  6092	SSONCredInjectionThread() 
17/07/2018 06:47:41  6264	SSONPasswordChangeThread() Start named pipe service loop.
17/07/2018 06:47:41  6092	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
17/07/2018 06:47:41  6092	SSONCredInjectionThread() Enter named pipe handler loop.
17/07/2018 06:47:41    -	WinMain() Signal pnsson.
17/07/2018 06:47:41  1200	BuildSecurityAttributesForUser() 
17/07/2018 06:47:41  1200	ConstructAclForObj() 
17/07/2018 06:47:41  1200	GetProcessOwnerToken() 
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Opened the current process.
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Got the buffer.
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 06:47:41  1200	GetProcessOwnerToken() Return: 000F3838.
17/07/2018 06:47:41  1200	ConstructAclForObj() Got pTokenOwner.
17/07/2018 06:47:41  1200	ConstructAclForObj() Got Owner SID
17/07/2018 06:47:41  1200	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 06:47:41  1200	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 06:47:41  1200	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 06:47:41  1200	ConstructAclForObj() Return. Success: 1
17/07/2018 06:47:41  1200	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
17/07/2018 06:47:41  1200	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
17/07/2018 06:47:41  1200	SSONRequestBrokerThread() Pipe created. Handle messages now.
17/07/2018 06:47:41  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
17/07/2018 06:48:10  1200	StoreLaunchedProcessHandle() 
17/07/2018 06:48:10  1200	StoreLaunchedProcessHandle() Saved handle 760 to WFCRUN process with PID 13104
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 06:48:10  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 06:48:10  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 06:53:10  1200	StoreLaunchedProcessHandle() 
17/07/2018 06:53:10  1200	StoreLaunchedProcessHandle() Saved handle 832 to AUTHMAN process with PID 13484
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 06:53:10  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 06:53:10  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:06:13  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:06:13  1200	StoreLaunchedProcessHandle() Saved handle 724 to AUTHMAN process with PID 980
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:06:13  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:06:13  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:06:29  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:06:29  1200	StoreLaunchedProcessHandle() Saved handle 808 to AUTHMAN process with PID 10904
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:06:29  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:06:29  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:06:44  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:06:44  1200	StoreLaunchedProcessHandle() Saved handle 828 to AUTHMAN process with PID 8524
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:06:44  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:06:44  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:07:00  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:07:00  1200	StoreLaunchedProcessHandle() Saved handle 856 to AUTHMAN process with PID 3400
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:07:00  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:07:00  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:07:15  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:07:15  1200	StoreLaunchedProcessHandle() Saved handle 880 to AUTHMAN process with PID 3392
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:07:15  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:07:15  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:07:30  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:07:30  1200	StoreLaunchedProcessHandle() Saved handle 868 to AUTHMAN process with PID 5044
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:07:30  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:07:30  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:07:46  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:07:46  1200	StoreLaunchedProcessHandle() Saved handle 772 to AUTHMAN process with PID 6696
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:07:46  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:07:46  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:08:01  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:08:01  1200	StoreLaunchedProcessHandle() Saved handle 868 to AUTHMAN process with PID 5628
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:08:01  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:08:01  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:08:16  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:08:16  1200	StoreLaunchedProcessHandle() Saved handle 880 to AUTHMAN process with PID 8916
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:08:16  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:08:16  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:08:32  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:08:32  1200	StoreLaunchedProcessHandle() Saved handle 860 to AUTHMAN process with PID 7944
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:08:32  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:08:32  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:08:47  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:08:47  1200	StoreLaunchedProcessHandle() Saved handle 848 to AUTHMAN process with PID 11380
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:08:47  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:08:47  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:09:02  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:09:02  1200	StoreLaunchedProcessHandle() Saved handle 860 to AUTHMAN process with PID 10452
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:09:02  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:09:02  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:09:18  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:09:18  1200	StoreLaunchedProcessHandle() Saved handle 812 to AUTHMAN process with PID 1344
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:09:18  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:09:18  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:09:33  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:09:33  1200	StoreLaunchedProcessHandle() Saved handle 860 to AUTHMAN process with PID 2084
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:09:33  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:09:33  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:09:48  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:09:48  1200	StoreLaunchedProcessHandle() Saved handle 812 to AUTHMAN process with PID 9012
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:09:48  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:09:48  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:10:04  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:10:04  1200	StoreLaunchedProcessHandle() Saved handle 832 to AUTHMAN process with PID 808
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:10:04  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:10:04  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:10:19  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:10:19  1200	StoreLaunchedProcessHandle() Saved handle 588 to AUTHMAN process with PID 3528
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:10:19  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:10:19  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:10:34  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:10:34  1200	StoreLaunchedProcessHandle() Saved handle 800 to AUTHMAN process with PID 4748
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:10:34  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:10:34  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:10:50  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:10:50  1200	StoreLaunchedProcessHandle() Saved handle 588 to AUTHMAN process with PID 7404
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:10:50  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:10:50  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:11:05  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:11:05  1200	StoreLaunchedProcessHandle() Saved handle 756 to AUTHMAN process with PID 32
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:11:05  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:11:05  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:11:20  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:11:20  1200	StoreLaunchedProcessHandle() Saved handle 804 to AUTHMAN process with PID 10840
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:11:20  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:11:20  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:11:36  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:11:36  1200	StoreLaunchedProcessHandle() Saved handle 880 to AUTHMAN process with PID 11288
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:11:36  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:11:36  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:11:51  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:11:51  1200	StoreLaunchedProcessHandle() Saved handle 868 to AUTHMAN process with PID 15200
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:11:51  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:11:51  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:12:06  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:12:06  1200	StoreLaunchedProcessHandle() Saved handle 772 to AUTHMAN process with PID 12104
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:12:06  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:12:06  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
17/07/2018 07:12:22  1200	StoreLaunchedProcessHandle() 
17/07/2018 07:12:22  1200	StoreLaunchedProcessHandle() Saved handle 896 to AUTHMAN process with PID 11668
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 07:12:22  1200	DisconnectPipeAndCloseHandles() 
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 07:12:22  1200	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:26:04    -	MyWndProc() MyWndProc: WM_QUERYSESSION
17/07/2018 08:26:04    -	MyWndProc() MyWndProc: WM_ENDSESSION
17/07/2018 08:26:04    -	WinMain() SsonSvr.exe Exiting
17/07/2018 08:41:44    -	WinMain() 
17/07/2018 08:41:44    -	WinMain() Initializing ssonsvr.
17/07/2018 08:41:44    -	IsUserSYSTEM() 
17/07/2018 08:41:44    -	IsUserSYSTEM() Result: 1.
17/07/2018 08:41:44    -	TerminationManager() 
17/07/2018 08:41:44    -	TerminationManager() Command line is NOT /TERMINATE.
17/07/2018 08:41:44    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7588.
17/07/2018 08:41:44    -	IsSSOnEnabled() 
17/07/2018 08:41:44  7588	WaitToTerminate() 
17/07/2018 08:41:44    -	IsSSOnPolicyEnabled() 
17/07/2018 08:41:44    -	IsRegistryKeySetTo() Return: retVal: 0.
17/07/2018 08:41:44    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
17/07/2018 08:41:44    -	IsSmartCardLogon() 
17/07/2018 08:41:44    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
17/07/2018 08:41:44    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:488 /LUID:000000000042EAC9.
17/07/2018 08:41:44    -	WinMain() Found the LUID parameter.
17/07/2018 08:41:44    -	WinMain() ullLuid: 0x000000000042EAC9.
17/07/2018 08:41:44    -	SSOn_GetCredentials() 
17/07/2018 08:41:44    -	ExtractCredentialsFromHtc() 
17/07/2018 08:41:44    -	ExtractCredentialsFromHtc() Success = 1.
17/07/2018 08:41:44    -	SSOn_GetCredentials() Retrieved data of type '1'
17/07/2018 08:41:44    -	WinMain() Got semaphore.
17/07/2018 08:41:44    -	ConstructAclForObj() 
17/07/2018 08:41:44    -	GetProcessOwnerToken() 
17/07/2018 08:41:44    -	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 08:41:44    -	GetProcessOwnerToken() Opened the current process.
17/07/2018 08:41:44    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 08:41:44    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 08:41:44    -	GetProcessOwnerToken() Got the buffer.
17/07/2018 08:41:44    -	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 08:41:44    -	GetProcessOwnerToken() Return: 007BA130.
17/07/2018 08:41:44    -	ConstructAclForObj() Got pTokenOwner.
17/07/2018 08:41:44    -	ConstructAclForObj() Got Owner SID
17/07/2018 08:41:44    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 08:41:44    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 08:41:44    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 08:41:44    -	ConstructAclForObj() Return. Success: 1
17/07/2018 08:41:44    -	WinMain() Got ACL.
17/07/2018 08:41:44    -	CreateSSONRequestBrokerThread() 
17/07/2018 08:41:44    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 7592.
17/07/2018 08:41:44    -	CreateSSONPasswordChangeThread() 
17/07/2018 08:41:44  7592	SSONRequestBrokerThread() 
17/07/2018 08:41:44    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7596.
17/07/2018 08:41:44  7592	GetFullInstallPath() 
17/07/2018 08:41:44    -	CreateSSONCredInjectionThread() 
17/07/2018 08:41:44  7596	SSONPasswordChangeThread() 
17/07/2018 08:41:44    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 7600.
17/07/2018 08:41:44    -	WinMain() Found the Imm32.dll library.
17/07/2018 08:41:44    -	WinMain() IME attachment disabled successfully.
17/07/2018 08:41:44  7596	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
17/07/2018 08:41:44  7600	SSONCredInjectionThread() 
17/07/2018 08:41:44  7596	SSONPasswordChangeThread() Start named pipe service loop.
17/07/2018 08:41:44  7600	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
17/07/2018 08:41:44  7600	SSONCredInjectionThread() Enter named pipe handler loop.
17/07/2018 08:41:44    -	WinMain() Signal pnsson.
17/07/2018 08:41:44  7592	BuildSecurityAttributesForUser() 
17/07/2018 08:41:44  7592	ConstructAclForObj() 
17/07/2018 08:41:44  7592	GetProcessOwnerToken() 
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Opened the current process.
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Got the buffer.
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 08:41:44  7592	GetProcessOwnerToken() Return: 007BA430.
17/07/2018 08:41:44  7592	ConstructAclForObj() Got pTokenOwner.
17/07/2018 08:41:44  7592	ConstructAclForObj() Got Owner SID
17/07/2018 08:41:44  7592	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 08:41:44  7592	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 08:41:44  7592	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 08:41:44  7592	ConstructAclForObj() Return. Success: 1
17/07/2018 08:41:44  7592	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
17/07/2018 08:41:44  7592	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
17/07/2018 08:41:44  7592	SSONRequestBrokerThread() Pipe created. Handle messages now.
17/07/2018 08:41:44  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:488 -Embedding'.
17/07/2018 08:44:09  7592	StoreLaunchedProcessHandle() 
17/07/2018 08:44:09  7592	StoreLaunchedProcessHandle() Saved handle 804 to WFCRUN process with PID 12556
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 08:44:09  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:44:09  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:488 -Embedding'.
17/07/2018 08:47:49  7592	StoreLaunchedProcessHandle() 
17/07/2018 08:47:49  7592	StoreLaunchedProcessHandle() Saved handle 852 to AUTHMAN process with PID 10216
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 08:47:49  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:47:49  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:47:51  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 08:47:51  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:47:51  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:47:51  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:47:54  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 08:47:54  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:47:54  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:47:54  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:58:17  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 08:58:17  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:58:17  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:58:17  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:58:18  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 08:58:18  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:58:18  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:58:18  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 08:58:19  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 08:58:19  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 08:58:19  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 08:58:19  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:488 -Embedding'.
17/07/2018 09:26:23  7592	StoreLaunchedProcessHandle() 
17/07/2018 09:26:23  7592	StoreLaunchedProcessHandle() Saved handle 880 to AUTHMAN process with PID 11460
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 09:26:23  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 09:26:23  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 09:26:24  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 09:26:24  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 09:26:24  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 09:26:24  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 09:26:26  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 09:26:26  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 09:26:26  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 09:26:26  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 09:55:57  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 09:55:57  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 09:55:57  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 09:55:57  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 09:55:59  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 09:55:59  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 09:55:59  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 09:55:59  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 09:56:00  7592	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 09:56:00  7592	DisconnectPipeAndCloseHandles() 
17/07/2018 09:56:00  7592	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 09:56:00  7592	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:11:15    -	MyWndProc() MyWndProc: WM_QUERYSESSION
17/07/2018 10:11:15    -	MyWndProc() MyWndProc: WM_ENDSESSION
17/07/2018 10:11:15    -	WinMain() SsonSvr.exe Exiting
17/07/2018 10:12:00    -	WinMain() 
17/07/2018 10:12:00    -	WinMain() Initializing ssonsvr.
17/07/2018 10:12:00    -	IsUserSYSTEM() 
17/07/2018 10:12:00    -	IsUserSYSTEM() Result: 1.
17/07/2018 10:12:00    -	TerminationManager() 
17/07/2018 10:12:00    -	TerminationManager() Command line is NOT /TERMINATE.
17/07/2018 10:12:00    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7804.
17/07/2018 10:12:00    -	IsSSOnEnabled() 
17/07/2018 10:12:00  7804	WaitToTerminate() 
17/07/2018 10:12:00    -	IsSSOnPolicyEnabled() 
17/07/2018 10:12:00    -	IsRegistryKeySetTo() Return: retVal: 0.
17/07/2018 10:12:00    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
17/07/2018 10:12:00    -	IsSmartCardLogon() 
17/07/2018 10:12:00    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
17/07/2018 10:12:00    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:440 /LUID:0000000000077A90.
17/07/2018 10:12:00    -	WinMain() Found the LUID parameter.
17/07/2018 10:12:00    -	WinMain() ullLuid: 0x0000000000077A90.
17/07/2018 10:12:00    -	SSOn_GetCredentials() 
17/07/2018 10:12:00    -	ExtractCredentialsFromHtc() 
17/07/2018 10:12:00    -	ExtractCredentialsFromHtc() Success = 1.
17/07/2018 10:12:00    -	SSOn_GetCredentials() Retrieved data of type '1'
17/07/2018 10:12:00    -	WinMain() Got semaphore.
17/07/2018 10:12:00    -	ConstructAclForObj() 
17/07/2018 10:12:00    -	GetProcessOwnerToken() 
17/07/2018 10:12:00    -	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 10:12:00    -	GetProcessOwnerToken() Opened the current process.
17/07/2018 10:12:00    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 10:12:00    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 10:12:00    -	GetProcessOwnerToken() Got the buffer.
17/07/2018 10:12:00    -	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 10:12:00    -	GetProcessOwnerToken() Return: 00D768E0.
17/07/2018 10:12:00    -	ConstructAclForObj() Got pTokenOwner.
17/07/2018 10:12:00    -	ConstructAclForObj() Got Owner SID
17/07/2018 10:12:00    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 10:12:00    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 10:12:00    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 10:12:00    -	ConstructAclForObj() Return. Success: 1
17/07/2018 10:12:00    -	WinMain() Got ACL.
17/07/2018 10:12:00    -	CreateSSONRequestBrokerThread() 
17/07/2018 10:12:00    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 7808.
17/07/2018 10:12:00    -	CreateSSONPasswordChangeThread() 
17/07/2018 10:12:00  7808	SSONRequestBrokerThread() 
17/07/2018 10:12:00    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7812.
17/07/2018 10:12:00  7808	GetFullInstallPath() 
17/07/2018 10:12:00    -	CreateSSONCredInjectionThread() 
17/07/2018 10:12:00    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 7816.
17/07/2018 10:12:00    -	WinMain() Found the Imm32.dll library.
17/07/2018 10:12:00  7812	SSONPasswordChangeThread() 
17/07/2018 10:12:00  7816	SSONCredInjectionThread() 
17/07/2018 10:12:00    -	WinMain() IME attachment disabled successfully.
17/07/2018 10:12:00  7816	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
17/07/2018 10:12:00  7816	SSONCredInjectionThread() Enter named pipe handler loop.
17/07/2018 10:12:00  7812	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
17/07/2018 10:12:00  7812	SSONPasswordChangeThread() Start named pipe service loop.
17/07/2018 10:12:00    -	WinMain() Signal pnsson.
17/07/2018 10:12:00  7808	BuildSecurityAttributesForUser() 
17/07/2018 10:12:00  7808	ConstructAclForObj() 
17/07/2018 10:12:00  7808	GetProcessOwnerToken() 
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Opened the current process.
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Got the buffer.
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 10:12:00  7808	GetProcessOwnerToken() Return: 00D85C78.
17/07/2018 10:12:00  7808	ConstructAclForObj() Got pTokenOwner.
17/07/2018 10:12:00  7808	ConstructAclForObj() Got Owner SID
17/07/2018 10:12:00  7808	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 10:12:00  7808	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 10:12:00  7808	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 10:12:00  7808	ConstructAclForObj() Return. Success: 1
17/07/2018 10:12:00  7808	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
17/07/2018 10:12:00  7808	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
17/07/2018 10:12:00  7808	SSONRequestBrokerThread() Pipe created. Handle messages now.
17/07/2018 10:12:00  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:440 -Embedding'.
17/07/2018 10:12:37  7808	StoreLaunchedProcessHandle() 
17/07/2018 10:12:37  7808	StoreLaunchedProcessHandle() Saved handle 788 to WFCRUN process with PID 9448
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 10:12:37  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:12:37  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:440 -Embedding'.
17/07/2018 10:13:49  7808	StoreLaunchedProcessHandle() 
17/07/2018 10:13:49  7808	StoreLaunchedProcessHandle() Saved handle 784 to AUTHMAN process with PID 12008
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 10:13:49  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:13:49  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:13:50  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 10:13:50  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:13:50  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:13:50  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:13:52  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 10:13:52  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:13:52  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:13:52  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:13:55  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 10:13:55  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:13:55  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:13:55  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:22:04  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 10:22:04  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:22:04  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:22:04  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 10:22:05  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 10:22:05  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 10:22:05  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 10:22:05  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:20:56  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 11:20:56  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:20:56  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:20:56  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:440 -Embedding'.
17/07/2018 11:33:10  7808	StoreLaunchedProcessHandle() 
17/07/2018 11:33:10  7808	StoreLaunchedProcessHandle() Saved handle 832 to AUTHMAN process with PID 13848
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 11:33:10  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:33:10  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:33:11  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 11:33:11  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:33:11  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:33:11  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:33:13  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 11:33:13  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:33:13  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:33:13  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:33:16  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 11:33:16  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:33:16  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:33:16  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:54:10  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 11:54:10  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:54:10  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:54:10  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 11:54:10  7808	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 11:54:10  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 11:54:10  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 11:54:10  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:440 -Embedding'.
17/07/2018 12:22:24  7808	StoreLaunchedProcessHandle() 
17/07/2018 12:22:24  7808	StoreLaunchedProcessHandle() Saved handle 824 to WFCRUN process with PID 1332
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 12:22:24  7808	DisconnectPipeAndCloseHandles() 
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:22:24  7808	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:22:38    -	MyWndProc() MyWndProc: WM_QUERYSESSION
17/07/2018 12:22:38    -	MyWndProc() MyWndProc: WM_ENDSESSION
17/07/2018 12:22:38    -	WinMain() SsonSvr.exe Exiting
17/07/2018 12:22:50    -	WinMain() 
17/07/2018 12:22:50    -	WinMain() Initializing ssonsvr.
17/07/2018 12:22:50    -	IsUserSYSTEM() 
17/07/2018 12:22:50    -	IsUserSYSTEM() Result: 1.
17/07/2018 12:22:50    -	TerminationManager() 
17/07/2018 12:22:50    -	TerminationManager() Command line is NOT /TERMINATE.
17/07/2018 12:22:50    -	TerminationManager() WaitToTerminate thread created. ThreadID: 13432.
17/07/2018 12:22:50    -	IsSSOnEnabled() 
17/07/2018 12:22:50  13432	WaitToTerminate() 
17/07/2018 12:22:50    -	IsSSOnPolicyEnabled() 
17/07/2018 12:22:50    -	IsRegistryKeySetTo() Return: retVal: 0.
17/07/2018 12:22:50    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
17/07/2018 12:22:50    -	IsSmartCardLogon() 
17/07/2018 12:22:50    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
17/07/2018 12:22:50    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:456 /LUID:0000000001014245.
17/07/2018 12:22:50    -	WinMain() Found the LUID parameter.
17/07/2018 12:22:50    -	WinMain() ullLuid: 0x0000000001014245.
17/07/2018 12:22:50    -	SSOn_GetCredentials() 
17/07/2018 12:22:50    -	ExtractCredentialsFromHtc() 
17/07/2018 12:22:50    -	ExtractCredentialsFromHtc() Success = 1.
17/07/2018 12:22:50    -	SSOn_GetCredentials() Retrieved data of type '1'
17/07/2018 12:22:50    -	WinMain() Got semaphore.
17/07/2018 12:22:50    -	ConstructAclForObj() 
17/07/2018 12:22:50    -	GetProcessOwnerToken() 
17/07/2018 12:22:50    -	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 12:22:50    -	GetProcessOwnerToken() Opened the current process.
17/07/2018 12:22:50    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 12:22:50    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 12:22:50    -	GetProcessOwnerToken() Got the buffer.
17/07/2018 12:22:50    -	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 12:22:50    -	GetProcessOwnerToken() Return: 007A5990.
17/07/2018 12:22:50    -	ConstructAclForObj() Got pTokenOwner.
17/07/2018 12:22:50    -	ConstructAclForObj() Got Owner SID
17/07/2018 12:22:50    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 12:22:50    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 12:22:50    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 12:22:50    -	ConstructAclForObj() Return. Success: 1
17/07/2018 12:22:50    -	WinMain() Got ACL.
17/07/2018 12:22:50    -	CreateSSONRequestBrokerThread() 
17/07/2018 12:22:50    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 13428.
17/07/2018 12:22:50    -	CreateSSONPasswordChangeThread() 
17/07/2018 12:22:50  13428	SSONRequestBrokerThread() 
17/07/2018 12:22:50    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 13372.
17/07/2018 12:22:50  13428	GetFullInstallPath() 
17/07/2018 12:22:50    -	CreateSSONCredInjectionThread() 
17/07/2018 12:22:50  13372	SSONPasswordChangeThread() 
17/07/2018 12:22:50    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 13296.
17/07/2018 12:22:50    -	WinMain() Found the Imm32.dll library.
17/07/2018 12:22:50    -	WinMain() IME attachment disabled successfully.
17/07/2018 12:22:50  13296	SSONCredInjectionThread() 
17/07/2018 12:22:50  13372	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000002PC.
17/07/2018 12:22:50  13372	SSONPasswordChangeThread() Start named pipe service loop.
17/07/2018 12:22:50  13296	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000002CI.
17/07/2018 12:22:50  13296	SSONCredInjectionThread() Enter named pipe handler loop.
17/07/2018 12:22:50  13428	BuildSecurityAttributesForUser() 
17/07/2018 12:22:50  13428	ConstructAclForObj() 
17/07/2018 12:22:50  13428	GetProcessOwnerToken() 
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Opened the current process.
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Got the buffer.
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 12:22:50  13428	GetProcessOwnerToken() Return: 007B7400.
17/07/2018 12:22:50  13428	ConstructAclForObj() Got pTokenOwner.
17/07/2018 12:22:50  13428	ConstructAclForObj() Got Owner SID
17/07/2018 12:22:50  13428	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 12:22:50  13428	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 12:22:50  13428	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 12:22:50  13428	ConstructAclForObj() Return. Success: 1
17/07/2018 12:22:50  13428	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
17/07/2018 12:22:50  13428	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000002.
17/07/2018 12:22:50    -	WinMain() Signal pnsson.
17/07/2018 12:22:50  13428	SSONRequestBrokerThread() Pipe created. Handle messages now.
17/07/2018 12:22:50  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:456 -Embedding'.
17/07/2018 12:23:17  13428	StoreLaunchedProcessHandle() 
17/07/2018 12:23:17  13428	StoreLaunchedProcessHandle() Saved handle 744 to WFCRUN process with PID 12968
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 12:23:17  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:23:17  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:456 -Embedding'.
17/07/2018 12:23:30  13428	StoreLaunchedProcessHandle() 
17/07/2018 12:23:30  13428	StoreLaunchedProcessHandle() Saved handle 740 to AUTHMAN process with PID 14480
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 12:23:30  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:23:30  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:23:33  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:23:33  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:23:33  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:23:33  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:23:35  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:23:35  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:23:35  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:23:35  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:23:37  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:23:37  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:23:37  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:23:37  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:40:39  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:40:39  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:40:39  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:40:39  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:40:39  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:40:39  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:40:39  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:40:39  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:456 -Embedding'.
17/07/2018 12:56:19  13428	StoreLaunchedProcessHandle() 
17/07/2018 12:56:19  13428	StoreLaunchedProcessHandle() Saved handle 812 to AUTHMAN process with PID 9960
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 12:56:19  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:56:19  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:56:21  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:56:21  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:56:21  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:56:21  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:56:22  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:56:22  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:56:22  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:56:22  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 12:56:25  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 12:56:25  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 12:56:25  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 12:56:25  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:456 -Embedding'.
17/07/2018 13:01:40  13428	StoreLaunchedProcessHandle() 
17/07/2018 13:01:40  13428	StoreLaunchedProcessHandle() Saved handle 764 to WFCRUN process with PID 7580
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 13:01:40  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:01:40  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:09:20  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:09:20  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 13:09:20  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:09:20  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:09:20  13428	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:09:20  13428	DisconnectPipeAndCloseHandles() 
17/07/2018 13:09:20  13428	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:09:20  13428	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:46:20    -	MyWndProc() MyWndProc: WM_QUERYSESSION
17/07/2018 13:46:20    -	MyWndProc() MyWndProc: WM_ENDSESSION
17/07/2018 13:46:20    -	WinMain() SsonSvr.exe Exiting
17/07/2018 13:47:05    -	WinMain() 
17/07/2018 13:47:05    -	WinMain() Initializing ssonsvr.
17/07/2018 13:47:05    -	IsUserSYSTEM() 
17/07/2018 13:47:05    -	IsUserSYSTEM() Result: 1.
17/07/2018 13:47:05    -	TerminationManager() 
17/07/2018 13:47:05    -	TerminationManager() Command line is NOT /TERMINATE.
17/07/2018 13:47:05    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7260.
17/07/2018 13:47:05    -	IsSSOnEnabled() 
17/07/2018 13:47:05  7260	WaitToTerminate() 
17/07/2018 13:47:05    -	IsSSOnPolicyEnabled() 
17/07/2018 13:47:05    -	IsRegistryKeySetTo() Return: retVal: 0.
17/07/2018 13:47:05    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
17/07/2018 13:47:05    -	IsSmartCardLogon() 
17/07/2018 13:47:05    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
17/07/2018 13:47:05    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:444 /LUID:0000000000066BB0.
17/07/2018 13:47:05    -	WinMain() Found the LUID parameter.
17/07/2018 13:47:05    -	WinMain() ullLuid: 0x0000000000066BB0.
17/07/2018 13:47:05    -	SSOn_GetCredentials() 
17/07/2018 13:47:05    -	ExtractCredentialsFromHtc() 
17/07/2018 13:47:05    -	ExtractCredentialsFromHtc() Success = 1.
17/07/2018 13:47:05    -	SSOn_GetCredentials() Retrieved data of type '1'
17/07/2018 13:47:05    -	WinMain() Got semaphore.
17/07/2018 13:47:05    -	ConstructAclForObj() 
17/07/2018 13:47:05    -	GetProcessOwnerToken() 
17/07/2018 13:47:05    -	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 13:47:05    -	GetProcessOwnerToken() Opened the current process.
17/07/2018 13:47:05    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 13:47:05    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 13:47:05    -	GetProcessOwnerToken() Got the buffer.
17/07/2018 13:47:05    -	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 13:47:05    -	GetProcessOwnerToken() Return: 01483F60.
17/07/2018 13:47:05    -	ConstructAclForObj() Got pTokenOwner.
17/07/2018 13:47:05    -	ConstructAclForObj() Got Owner SID
17/07/2018 13:47:05    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 13:47:05    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 13:47:05    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 13:47:05    -	ConstructAclForObj() Return. Success: 1
17/07/2018 13:47:05    -	WinMain() Got ACL.
17/07/2018 13:47:05    -	CreateSSONRequestBrokerThread() 
17/07/2018 13:47:05    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 7264.
17/07/2018 13:47:05    -	CreateSSONPasswordChangeThread() 
17/07/2018 13:47:05    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7268.
17/07/2018 13:47:05    -	CreateSSONCredInjectionThread() 
17/07/2018 13:47:05    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 7272.
17/07/2018 13:47:05    -	WinMain() Found the Imm32.dll library.
17/07/2018 13:47:05  7264	SSONRequestBrokerThread() 
17/07/2018 13:47:05  7264	GetFullInstallPath() 
17/07/2018 13:47:05  7268	SSONPasswordChangeThread() 
17/07/2018 13:47:05    -	WinMain() IME attachment disabled successfully.
17/07/2018 13:47:05  7272	SSONCredInjectionThread() 
17/07/2018 13:47:05  7272	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
17/07/2018 13:47:05  7268	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
17/07/2018 13:47:05  7272	SSONCredInjectionThread() Enter named pipe handler loop.
17/07/2018 13:47:05  7268	SSONPasswordChangeThread() Start named pipe service loop.
17/07/2018 13:47:05    -	WinMain() Signal pnsson.
17/07/2018 13:47:05  7264	BuildSecurityAttributesForUser() 
17/07/2018 13:47:05  7264	ConstructAclForObj() 
17/07/2018 13:47:05  7264	GetProcessOwnerToken() 
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Opened the current process.
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Got the buffer.
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 13:47:05  7264	GetProcessOwnerToken() Return: 01497EB8.
17/07/2018 13:47:05  7264	ConstructAclForObj() Got pTokenOwner.
17/07/2018 13:47:05  7264	ConstructAclForObj() Got Owner SID
17/07/2018 13:47:05  7264	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 13:47:05  7264	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 13:47:05  7264	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 13:47:05  7264	ConstructAclForObj() Return. Success: 1
17/07/2018 13:47:05  7264	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
17/07/2018 13:47:05  7264	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
17/07/2018 13:47:05  7264	SSONRequestBrokerThread() Pipe created. Handle messages now.
17/07/2018 13:47:05  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:444 -Embedding'.
17/07/2018 13:47:44  7264	StoreLaunchedProcessHandle() 
17/07/2018 13:47:44  7264	StoreLaunchedProcessHandle() Saved handle 760 to WFCRUN process with PID 13436
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 13:47:44  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:47:44  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:444 -Embedding'.
17/07/2018 13:47:59  7264	StoreLaunchedProcessHandle() 
17/07/2018 13:47:59  7264	StoreLaunchedProcessHandle() Saved handle 812 to AUTHMAN process with PID 15316
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 13:47:59  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:47:59  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:48:04  7264	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:48:04  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:48:04  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:48:04  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:48:06  7264	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:48:06  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:48:06  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:48:06  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:48:09  7264	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:48:09  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:48:09  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:48:09  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:58:05  7264	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:58:05  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:58:05  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:58:05  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 13:58:06  7264	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 13:58:06  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 13:58:06  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 13:58:06  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 14:09:32  7264	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 14:09:32  7264	DisconnectPipeAndCloseHandles() 
17/07/2018 14:09:32  7264	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 14:09:32  7264	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:07:18    -	MyWndProc() MyWndProc: WM_QUERYSESSION
17/07/2018 15:07:18    -	MyWndProc() MyWndProc: WM_ENDSESSION
17/07/2018 15:07:18    -	WinMain() SsonSvr.exe Exiting
17/07/2018 15:10:19    -	WinMain() 
17/07/2018 15:10:19    -	WinMain() Initializing ssonsvr.
17/07/2018 15:10:19    -	IsUserSYSTEM() 
17/07/2018 15:10:19    -	IsUserSYSTEM() Result: 1.
17/07/2018 15:10:19    -	TerminationManager() 
17/07/2018 15:10:19    -	TerminationManager() Command line is NOT /TERMINATE.
17/07/2018 15:10:19    -	TerminationManager() WaitToTerminate thread created. ThreadID: 564.
17/07/2018 15:10:19    -	IsSSOnEnabled() 
17/07/2018 15:10:19  564	WaitToTerminate() 
17/07/2018 15:10:19    -	IsSSOnPolicyEnabled() 
17/07/2018 15:10:19    -	IsRegistryKeySetTo() Return: retVal: 0.
17/07/2018 15:10:19    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
17/07/2018 15:10:19    -	IsSmartCardLogon() 
17/07/2018 15:10:19    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
17/07/2018 15:10:20    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:464 /LUID:00000000000D3FE3.
17/07/2018 15:10:20    -	WinMain() Found the LUID parameter.
17/07/2018 15:10:20    -	WinMain() ullLuid: 0x00000000000D3FE3.
17/07/2018 15:10:20    -	SSOn_GetCredentials() 
17/07/2018 15:10:20    -	ExtractCredentialsFromHtc() 
17/07/2018 15:10:20    -	ExtractCredentialsFromHtc() Success = 1.
17/07/2018 15:10:20    -	SSOn_GetCredentials() Retrieved data of type '1'
17/07/2018 15:10:20    -	WinMain() Got semaphore.
17/07/2018 15:10:20    -	ConstructAclForObj() 
17/07/2018 15:10:20    -	GetProcessOwnerToken() 
17/07/2018 15:10:20    -	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 15:10:20    -	GetProcessOwnerToken() Opened the current process.
17/07/2018 15:10:20    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 15:10:20    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 15:10:20    -	GetProcessOwnerToken() Got the buffer.
17/07/2018 15:10:20    -	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 15:10:20    -	GetProcessOwnerToken() Return: 008439E8.
17/07/2018 15:10:20    -	ConstructAclForObj() Got pTokenOwner.
17/07/2018 15:10:20    -	ConstructAclForObj() Got Owner SID
17/07/2018 15:10:20    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 15:10:20    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 15:10:20    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 15:10:20    -	ConstructAclForObj() Return. Success: 1
17/07/2018 15:10:20    -	WinMain() Got ACL.
17/07/2018 15:10:20    -	CreateSSONRequestBrokerThread() 
17/07/2018 15:10:20    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 612.
17/07/2018 15:10:20    -	CreateSSONPasswordChangeThread() 
17/07/2018 15:10:20  612	SSONRequestBrokerThread() 
17/07/2018 15:10:20    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 536.
17/07/2018 15:10:20  612	GetFullInstallPath() 
17/07/2018 15:10:20    -	CreateSSONCredInjectionThread() 
17/07/2018 15:10:20  536	SSONPasswordChangeThread() 
17/07/2018 15:10:20    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 548.
17/07/2018 15:10:20    -	WinMain() Found the Imm32.dll library.
17/07/2018 15:10:20  536	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
17/07/2018 15:10:20  548	SSONCredInjectionThread() 
17/07/2018 15:10:20    -	WinMain() IME attachment disabled successfully.
17/07/2018 15:10:20  536	SSONPasswordChangeThread() Start named pipe service loop.
17/07/2018 15:10:20  548	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
17/07/2018 15:10:20  548	SSONCredInjectionThread() Enter named pipe handler loop.
17/07/2018 15:10:20    -	WinMain() Signal pnsson.
17/07/2018 15:10:20  612	BuildSecurityAttributesForUser() 
17/07/2018 15:10:20  612	ConstructAclForObj() 
17/07/2018 15:10:20  612	GetProcessOwnerToken() 
17/07/2018 15:10:20  612	GetProcessOwnerToken() Creating local owner SID.
17/07/2018 15:10:20  612	GetProcessOwnerToken() Opened the current process.
17/07/2018 15:10:20  612	GetProcessOwnerToken() Opened the current process token. Get the token info.
17/07/2018 15:10:20  612	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
17/07/2018 15:10:20  612	GetProcessOwnerToken() Got the buffer.
17/07/2018 15:10:20  612	GetProcessOwnerToken() Successfully acquired process owner's token.
17/07/2018 15:10:20  612	GetProcessOwnerToken() Return: 00853F48.
17/07/2018 15:10:20  612	ConstructAclForObj() Got pTokenOwner.
17/07/2018 15:10:20  612	ConstructAclForObj() Got Owner SID
17/07/2018 15:10:20  612	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
17/07/2018 15:10:20  612	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
17/07/2018 15:10:20  612	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
17/07/2018 15:10:20  612	ConstructAclForObj() Return. Success: 1
17/07/2018 15:10:20  612	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
17/07/2018 15:10:20  612	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
17/07/2018 15:10:20  612	SSONRequestBrokerThread() Pipe created. Handle messages now.
17/07/2018 15:10:20  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:464 -Embedding'.
17/07/2018 15:11:06  612	StoreLaunchedProcessHandle() 
17/07/2018 15:11:06  612	StoreLaunchedProcessHandle() Saved handle 804 to WFCRUN process with PID 12824
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 15:11:06  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:11:06  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:464 -Embedding'.
17/07/2018 15:13:31  612	StoreLaunchedProcessHandle() 
17/07/2018 15:13:31  612	StoreLaunchedProcessHandle() Saved handle 824 to AUTHMAN process with PID 9304
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 15:13:31  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:13:31  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() Received launch request
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() File verified.
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:464 -Embedding'.
17/07/2018 15:14:14  612	StoreLaunchedProcessHandle() 
17/07/2018 15:14:14  612	StoreLaunchedProcessHandle() Saved handle 852 to AUTHMAN process with PID 11684
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
17/07/2018 15:14:14  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:14:14  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:14:16  612	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 15:14:16  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:14:16  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:14:16  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:14:21  612	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 15:14:21  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:14:21  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:14:21  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:43:15  612	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 15:43:15  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:43:15  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:43:15  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:43:16  612	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 15:43:16  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:43:16  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:43:16  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 15:43:16  612	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
17/07/2018 15:43:16  612	DisconnectPipeAndCloseHandles() 
17/07/2018 15:43:16  612	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
17/07/2018 15:43:16  612	SSONRequestBrokerThread_InnerLoop() 
17/07/2018 16:10:30    -	MyWndProc() MyWndProc: WM_QUERYSESSION
17/07/2018 16:10:30    -	MyWndProc() MyWndProc: WM_ENDSESSION
17/07/2018 16:10:30    -	WinMain() SsonSvr.exe Exiting
18/07/2018 07:06:49    -	WinMain() 
18/07/2018 07:06:49    -	WinMain() Initializing ssonsvr.
18/07/2018 07:06:49    -	IsUserSYSTEM() 
18/07/2018 07:06:49    -	IsUserSYSTEM() Result: 1.
18/07/2018 07:06:49    -	TerminationManager() 
18/07/2018 07:06:49    -	TerminationManager() Command line is NOT /TERMINATE.
18/07/2018 07:06:49    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7460.
18/07/2018 07:06:49    -	IsSSOnEnabled() 
18/07/2018 07:06:49  7460	WaitToTerminate() 
18/07/2018 07:06:49    -	IsSSOnPolicyEnabled() 
18/07/2018 07:06:49    -	IsRegistryKeySetTo() Return: retVal: 0.
18/07/2018 07:06:49    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
18/07/2018 07:06:49    -	IsSmartCardLogon() 
18/07/2018 07:06:49    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
18/07/2018 07:06:49    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000000710F8.
18/07/2018 07:06:49    -	WinMain() Found the LUID parameter.
18/07/2018 07:06:49    -	WinMain() ullLuid: 0x00000000000710F8.
18/07/2018 07:06:49    -	SSOn_GetCredentials() 
18/07/2018 07:06:49    -	ExtractCredentialsFromHtc() 
18/07/2018 07:06:49    -	ExtractCredentialsFromHtc() Success = 1.
18/07/2018 07:06:49    -	SSOn_GetCredentials() Retrieved data of type '1'
18/07/2018 07:06:49    -	WinMain() Got semaphore.
18/07/2018 07:06:49    -	ConstructAclForObj() 
18/07/2018 07:06:49    -	GetProcessOwnerToken() 
18/07/2018 07:06:49    -	GetProcessOwnerToken() Creating local owner SID.
18/07/2018 07:06:49    -	GetProcessOwnerToken() Opened the current process.
18/07/2018 07:06:49    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
18/07/2018 07:06:49    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
18/07/2018 07:06:49    -	GetProcessOwnerToken() Got the buffer.
18/07/2018 07:06:49    -	GetProcessOwnerToken() Successfully acquired process owner's token.
18/07/2018 07:06:49    -	GetProcessOwnerToken() Return: 00CB2A00.
18/07/2018 07:06:49    -	ConstructAclForObj() Got pTokenOwner.
18/07/2018 07:06:49    -	ConstructAclForObj() Got Owner SID
18/07/2018 07:06:49    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
18/07/2018 07:06:49    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
18/07/2018 07:06:49    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
18/07/2018 07:06:49    -	ConstructAclForObj() Return. Success: 1
18/07/2018 07:06:49    -	WinMain() Got ACL.
18/07/2018 07:06:49    -	CreateSSONRequestBrokerThread() 
18/07/2018 07:06:49    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 7464.
18/07/2018 07:06:49    -	CreateSSONPasswordChangeThread() 
18/07/2018 07:06:49    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7468.
18/07/2018 07:06:49    -	CreateSSONCredInjectionThread() 
18/07/2018 07:06:49    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 7472.
18/07/2018 07:06:49    -	WinMain() Found the Imm32.dll library.
18/07/2018 07:06:49  7464	SSONRequestBrokerThread() 
18/07/2018 07:06:49  7464	GetFullInstallPath() 
18/07/2018 07:06:49    -	WinMain() IME attachment disabled successfully.
18/07/2018 07:06:49  7468	SSONPasswordChangeThread() 
18/07/2018 07:06:49  7468	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
18/07/2018 07:06:49  7468	SSONPasswordChangeThread() Start named pipe service loop.
18/07/2018 07:06:49  7472	SSONCredInjectionThread() 
18/07/2018 07:06:49  7472	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
18/07/2018 07:06:49  7472	SSONCredInjectionThread() Enter named pipe handler loop.
18/07/2018 07:06:49    -	WinMain() Signal pnsson.
18/07/2018 07:06:49  7464	BuildSecurityAttributesForUser() 
18/07/2018 07:06:49  7464	ConstructAclForObj() 
18/07/2018 07:06:49  7464	GetProcessOwnerToken() 
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Creating local owner SID.
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Opened the current process.
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Opened the current process token. Get the token info.
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Got the buffer.
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Successfully acquired process owner's token.
18/07/2018 07:06:49  7464	GetProcessOwnerToken() Return: 00CCD420.
18/07/2018 07:06:49  7464	ConstructAclForObj() Got pTokenOwner.
18/07/2018 07:06:49  7464	ConstructAclForObj() Got Owner SID
18/07/2018 07:06:49  7464	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
18/07/2018 07:06:49  7464	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
18/07/2018 07:06:49  7464	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
18/07/2018 07:06:49  7464	ConstructAclForObj() Return. Success: 1
18/07/2018 07:06:49  7464	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
18/07/2018 07:06:49  7464	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
18/07/2018 07:06:49  7464	SSONRequestBrokerThread() Pipe created. Handle messages now.
18/07/2018 07:06:49  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() Received launch request
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() File verified.
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
18/07/2018 07:07:19  7464	StoreLaunchedProcessHandle() 
18/07/2018 07:07:19  7464	StoreLaunchedProcessHandle() Saved handle 588 to WFCRUN process with PID 13844
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
18/07/2018 07:07:19  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:07:19  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() Received launch request
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() File verified.
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
18/07/2018 07:12:19  7464	StoreLaunchedProcessHandle() 
18/07/2018 07:12:19  7464	StoreLaunchedProcessHandle() Saved handle 716 to AUTHMAN process with PID 10096
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
18/07/2018 07:12:19  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:12:19  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:26:42  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 07:26:42  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:26:42  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:26:42  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:26:43  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 07:26:43  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:26:43  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:26:43  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:26:43  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 07:26:43  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:26:43  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:26:43  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:48:25  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 07:48:25  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:48:25  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:48:25  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 07:48:27  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 07:48:27  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 07:48:27  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 07:48:27  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() Received launch request
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() File verified.
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
18/07/2018 08:17:28  7464	StoreLaunchedProcessHandle() 
18/07/2018 08:17:28  7464	StoreLaunchedProcessHandle() Saved handle 776 to AUTHMAN process with PID 11740
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
18/07/2018 08:17:28  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 08:17:28  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 08:17:30  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 08:17:30  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 08:17:30  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 08:17:30  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 08:17:31  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 08:17:31  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 08:17:31  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 08:17:31  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 08:17:33  7464	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
18/07/2018 08:17:33  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 08:17:33  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 08:17:33  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() Received launch request
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() File verified.
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
18/07/2018 08:17:41  7464	StoreLaunchedProcessHandle() 
18/07/2018 08:17:41  7464	StoreLaunchedProcessHandle() Saved handle 832 to WFCRUN process with PID 1204
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
18/07/2018 08:17:41  7464	DisconnectPipeAndCloseHandles() 
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
18/07/2018 08:17:41  7464	SSONRequestBrokerThread_InnerLoop() 
18/07/2018 16:07:36    -	MyWndProc() MyWndProc: WM_QUERYSESSION
18/07/2018 16:07:36    -	MyWndProc() MyWndProc: WM_ENDSESSION
18/07/2018 16:07:36    -	WinMain() SsonSvr.exe Exiting
19/07/2018 07:17:11    -	WinMain() 
19/07/2018 07:17:11    -	WinMain() Initializing ssonsvr.
19/07/2018 07:17:11    -	IsUserSYSTEM() 
19/07/2018 07:17:11    -	IsUserSYSTEM() Result: 1.
19/07/2018 07:17:11    -	TerminationManager() 
19/07/2018 07:17:11    -	TerminationManager() Command line is NOT /TERMINATE.
19/07/2018 07:17:11    -	TerminationManager() WaitToTerminate thread created. ThreadID: 4544.
19/07/2018 07:17:11    -	IsSSOnEnabled() 
19/07/2018 07:17:11  4544	WaitToTerminate() 
19/07/2018 07:17:11    -	IsSSOnPolicyEnabled() 
19/07/2018 07:17:11    -	IsRegistryKeySetTo() Return: retVal: 0.
19/07/2018 07:17:11    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
19/07/2018 07:17:11    -	IsSmartCardLogon() 
19/07/2018 07:17:11    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
19/07/2018 07:17:11    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:440 /LUID:0000000000245CBE.
19/07/2018 07:17:11    -	WinMain() Found the LUID parameter.
19/07/2018 07:17:11    -	WinMain() ullLuid: 0x0000000000245CBE.
19/07/2018 07:17:11    -	SSOn_GetCredentials() 
19/07/2018 07:17:11    -	ExtractCredentialsFromHtc() 
19/07/2018 07:17:11    -	ExtractCredentialsFromHtc() Success = 1.
19/07/2018 07:17:11    -	SSOn_GetCredentials() Retrieved data of type '1'
19/07/2018 07:17:11    -	WinMain() Got semaphore.
19/07/2018 07:17:11    -	ConstructAclForObj() 
19/07/2018 07:17:11    -	GetProcessOwnerToken() 
19/07/2018 07:17:11    -	GetProcessOwnerToken() Creating local owner SID.
19/07/2018 07:17:11    -	GetProcessOwnerToken() Opened the current process.
19/07/2018 07:17:11    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
19/07/2018 07:17:11    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
19/07/2018 07:17:11    -	GetProcessOwnerToken() Got the buffer.
19/07/2018 07:17:11    -	GetProcessOwnerToken() Successfully acquired process owner's token.
19/07/2018 07:17:11    -	GetProcessOwnerToken() Return: 00F73B18.
19/07/2018 07:17:11    -	ConstructAclForObj() Got pTokenOwner.
19/07/2018 07:17:11    -	ConstructAclForObj() Got Owner SID
19/07/2018 07:17:11    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
19/07/2018 07:17:11    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
19/07/2018 07:17:11    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
19/07/2018 07:17:11    -	ConstructAclForObj() Return. Success: 1
19/07/2018 07:17:11    -	WinMain() Got ACL.
19/07/2018 07:17:11    -	CreateSSONRequestBrokerThread() 
19/07/2018 07:17:11    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 4596.
19/07/2018 07:17:11    -	CreateSSONPasswordChangeThread() 
19/07/2018 07:17:11  4596	SSONRequestBrokerThread() 
19/07/2018 07:17:11    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7320.
19/07/2018 07:17:11  4596	GetFullInstallPath() 
19/07/2018 07:17:11    -	CreateSSONCredInjectionThread() 
19/07/2018 07:17:11  7320	SSONPasswordChangeThread() 
19/07/2018 07:17:11    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 2640.
19/07/2018 07:17:11    -	WinMain() Found the Imm32.dll library.
19/07/2018 07:17:11    -	WinMain() IME attachment disabled successfully.
19/07/2018 07:17:11  7320	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
19/07/2018 07:17:11  2640	SSONCredInjectionThread() 
19/07/2018 07:17:11  7320	SSONPasswordChangeThread() Start named pipe service loop.
19/07/2018 07:17:11  2640	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
19/07/2018 07:17:11  2640	SSONCredInjectionThread() Enter named pipe handler loop.
19/07/2018 07:17:11  4596	BuildSecurityAttributesForUser() 
19/07/2018 07:17:11  4596	ConstructAclForObj() 
19/07/2018 07:17:11  4596	GetProcessOwnerToken() 
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Creating local owner SID.
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Opened the current process.
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Opened the current process token. Get the token info.
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Got the buffer.
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Successfully acquired process owner's token.
19/07/2018 07:17:11  4596	GetProcessOwnerToken() Return: 00F67BE0.
19/07/2018 07:17:11  4596	ConstructAclForObj() Got pTokenOwner.
19/07/2018 07:17:11  4596	ConstructAclForObj() Got Owner SID
19/07/2018 07:17:11  4596	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
19/07/2018 07:17:11  4596	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
19/07/2018 07:17:11  4596	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
19/07/2018 07:17:11  4596	ConstructAclForObj() Return. Success: 1
19/07/2018 07:17:11    -	WinMain() Signal pnsson.
19/07/2018 07:17:11  4596	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
19/07/2018 07:17:11  4596	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
19/07/2018 07:17:11  4596	SSONRequestBrokerThread() Pipe created. Handle messages now.
19/07/2018 07:17:11  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() Received launch request
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() File verified.
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:440 -Embedding'.
19/07/2018 07:17:50  4596	StoreLaunchedProcessHandle() 
19/07/2018 07:17:50  4596	StoreLaunchedProcessHandle() Saved handle 792 to WFCRUN process with PID 15436
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
19/07/2018 07:17:50  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 07:17:50  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() Received launch request
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() File verified.
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:440 -Embedding'.
19/07/2018 07:22:50  4596	StoreLaunchedProcessHandle() 
19/07/2018 07:22:50  4596	StoreLaunchedProcessHandle() Saved handle 820 to AUTHMAN process with PID 15644
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
19/07/2018 07:22:50  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 07:22:50  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 07:36:11  4596	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
19/07/2018 07:36:11  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 07:36:11  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 07:36:11  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 07:36:12  4596	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
19/07/2018 07:36:12  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 07:36:12  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 07:36:12  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 07:36:12  4596	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
19/07/2018 07:36:12  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 07:36:12  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 07:36:12  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 08:36:11  4596	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
19/07/2018 08:36:11  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 08:36:11  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 08:36:11  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 09:36:11  4596	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
19/07/2018 09:36:11  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 09:36:11  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 09:36:11  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 10:04:18  4596	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
19/07/2018 10:04:18  4596	DisconnectPipeAndCloseHandles() 
19/07/2018 10:04:18  4596	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
19/07/2018 10:04:18  4596	SSONRequestBrokerThread_InnerLoop() 
19/07/2018 10:09:48    -	MyWndProc() MyWndProc: WM_QUERYSESSION
19/07/2018 10:09:48    -	MyWndProc() MyWndProc: WM_ENDSESSION
19/07/2018 10:09:48    -	WinMain() SsonSvr.exe Exiting
20/07/2018 07:01:04    -	WinMain() 
20/07/2018 07:01:04    -	WinMain() Initializing ssonsvr.
20/07/2018 07:01:04    -	IsUserSYSTEM() 
20/07/2018 07:01:04    -	IsUserSYSTEM() Result: 1.
20/07/2018 07:01:04    -	TerminationManager() 
20/07/2018 07:01:04    -	TerminationManager() Command line is NOT /TERMINATE.
20/07/2018 07:01:04    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7100.
20/07/2018 07:01:04    -	IsSSOnEnabled() 
20/07/2018 07:01:04  7100	WaitToTerminate() 
20/07/2018 07:01:04    -	IsSSOnPolicyEnabled() 
20/07/2018 07:01:04    -	IsRegistryKeySetTo() Return: retVal: 0.
20/07/2018 07:01:04    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
20/07/2018 07:01:04    -	IsSmartCardLogon() 
20/07/2018 07:01:04    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
20/07/2018 07:01:04    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000000C71CC.
20/07/2018 07:01:04    -	WinMain() Found the LUID parameter.
20/07/2018 07:01:04    -	WinMain() ullLuid: 0x00000000000C71CC.
20/07/2018 07:01:04    -	SSOn_GetCredentials() 
20/07/2018 07:01:04    -	ExtractCredentialsFromHtc() 
20/07/2018 07:01:04    -	ExtractCredentialsFromHtc() Success = 1.
20/07/2018 07:01:04    -	SSOn_GetCredentials() Retrieved data of type '1'
20/07/2018 07:01:04    -	WinMain() Got semaphore.
20/07/2018 07:01:04    -	ConstructAclForObj() 
20/07/2018 07:01:04    -	GetProcessOwnerToken() 
20/07/2018 07:01:04    -	GetProcessOwnerToken() Creating local owner SID.
20/07/2018 07:01:04    -	GetProcessOwnerToken() Opened the current process.
20/07/2018 07:01:04    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
20/07/2018 07:01:04    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
20/07/2018 07:01:04    -	GetProcessOwnerToken() Got the buffer.
20/07/2018 07:01:04    -	GetProcessOwnerToken() Successfully acquired process owner's token.
20/07/2018 07:01:04    -	GetProcessOwnerToken() Return: 01053F20.
20/07/2018 07:01:04    -	ConstructAclForObj() Got pTokenOwner.
20/07/2018 07:01:04    -	ConstructAclForObj() Got Owner SID
20/07/2018 07:01:04    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
20/07/2018 07:01:04    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
20/07/2018 07:01:04    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
20/07/2018 07:01:04    -	ConstructAclForObj() Return. Success: 1
20/07/2018 07:01:04    -	WinMain() Got ACL.
20/07/2018 07:01:04    -	CreateSSONRequestBrokerThread() 
20/07/2018 07:01:04    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 4960.
20/07/2018 07:01:04    -	CreateSSONPasswordChangeThread() 
20/07/2018 07:01:04  4960	SSONRequestBrokerThread() 
20/07/2018 07:01:04  4960	GetFullInstallPath() 
20/07/2018 07:01:04    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7132.
20/07/2018 07:01:04    -	CreateSSONCredInjectionThread() 
20/07/2018 07:01:04  7132	SSONPasswordChangeThread() 
20/07/2018 07:01:04    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 7124.
20/07/2018 07:01:04    -	WinMain() Found the Imm32.dll library.
20/07/2018 07:01:04  7132	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000001PC.
20/07/2018 07:01:04  7124	SSONCredInjectionThread() 
20/07/2018 07:01:04    -	WinMain() IME attachment disabled successfully.
20/07/2018 07:01:04  7132	SSONPasswordChangeThread() Start named pipe service loop.
20/07/2018 07:01:04  7124	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000001CI.
20/07/2018 07:01:04  7124	SSONCredInjectionThread() Enter named pipe handler loop.
20/07/2018 07:01:04    -	WinMain() Signal pnsson.
20/07/2018 07:01:04  4960	BuildSecurityAttributesForUser() 
20/07/2018 07:01:04  4960	ConstructAclForObj() 
20/07/2018 07:01:04  4960	GetProcessOwnerToken() 
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Creating local owner SID.
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Opened the current process.
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Opened the current process token. Get the token info.
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Got the buffer.
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Successfully acquired process owner's token.
20/07/2018 07:01:04  4960	GetProcessOwnerToken() Return: 01044C58.
20/07/2018 07:01:04  4960	ConstructAclForObj() Got pTokenOwner.
20/07/2018 07:01:04  4960	ConstructAclForObj() Got Owner SID
20/07/2018 07:01:04  4960	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
20/07/2018 07:01:04  4960	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
20/07/2018 07:01:04  4960	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
20/07/2018 07:01:04  4960	ConstructAclForObj() Return. Success: 1
20/07/2018 07:01:04  4960	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
20/07/2018 07:01:04  4960	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000001.
20/07/2018 07:01:04  4960	SSONRequestBrokerThread() Pipe created. Handle messages now.
20/07/2018 07:01:04  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
20/07/2018 07:01:38  4960	StoreLaunchedProcessHandle() 
20/07/2018 07:01:38  4960	StoreLaunchedProcessHandle() Saved handle 792 to WFCRUN process with PID 12340
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 07:01:38  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:01:38  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
20/07/2018 07:06:38  4960	StoreLaunchedProcessHandle() 
20/07/2018 07:06:38  4960	StoreLaunchedProcessHandle() Saved handle 796 to AUTHMAN process with PID 14232
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 07:06:38  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:06:38  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:16:35  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:16:35  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:16:35  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:16:35  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:16:37  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:16:37  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:16:37  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:16:37  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:16:38  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:16:38  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:16:38  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:16:38  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
20/07/2018 07:56:36  4960	StoreLaunchedProcessHandle() 
20/07/2018 07:56:36  4960	StoreLaunchedProcessHandle() Saved handle 780 to AUTHMAN process with PID 3020
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 07:56:36  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:56:36  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:56:40  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:56:40  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:56:40  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:56:40  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:56:41  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:56:41  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:56:41  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:56:41  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:56:44  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:56:44  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:56:44  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:56:44  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 07:56:51  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 07:56:51  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 07:56:51  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 07:56:51  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:10:48  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 08:10:48  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:10:48  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:10:48  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:10:48  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 08:10:48  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:10:48  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:10:48  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
20/07/2018 08:28:32  4960	StoreLaunchedProcessHandle() 
20/07/2018 08:28:32  4960	StoreLaunchedProcessHandle() Saved handle 832 to WFCRUN process with PID 15588
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 08:28:32  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:28:32  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
20/07/2018 08:34:23  4960	StoreLaunchedProcessHandle() 
20/07/2018 08:34:23  4960	StoreLaunchedProcessHandle() Saved handle 760 to AUTHMAN process with PID 12632
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 08:34:23  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:34:23  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 08:34:27  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
20/07/2018 08:34:27  4960	StoreLaunchedProcessHandle() 
20/07/2018 08:34:27  4960	StoreLaunchedProcessHandle() Saved handle 828 to WFCRUN process with PID 10440
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 08:34:27  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:34:27  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:34:29  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 08:34:29  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:34:29  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:34:29  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:34:33  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 08:34:33  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:34:33  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:34:33  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:34:38  4960	SSONRequestBrokerThread_InnerLoop() Received message was too short. Expected 788, got 5
20/07/2018 08:34:38  4960	DisconnectPipeAndCloseHandles() 
20/07/2018 08:34:38  4960	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:34:38  4960	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:44:48    -	MyWndProc() MyWndProc: WM_QUERYSESSION
20/07/2018 08:44:48    -	MyWndProc() MyWndProc: WM_ENDSESSION
20/07/2018 08:44:48    -	WinMain() SsonSvr.exe Exiting
20/07/2018 08:45:00    -	WinMain() 
20/07/2018 08:45:00    -	WinMain() Initializing ssonsvr.
20/07/2018 08:45:00    -	IsUserSYSTEM() 
20/07/2018 08:45:00    -	IsUserSYSTEM() Result: 1.
20/07/2018 08:45:00    -	TerminationManager() 
20/07/2018 08:45:00    -	TerminationManager() Command line is NOT /TERMINATE.
20/07/2018 08:45:00    -	TerminationManager() WaitToTerminate thread created. ThreadID: 12508.
20/07/2018 08:45:00    -	IsSSOnEnabled() 
20/07/2018 08:45:00  12508	WaitToTerminate() 
20/07/2018 08:45:00    -	IsSSOnPolicyEnabled() 
20/07/2018 08:45:00    -	IsRegistryKeySetTo() Return: retVal: 0.
20/07/2018 08:45:00    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
20/07/2018 08:45:00    -	IsSmartCardLogon() 
20/07/2018 08:45:00    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
20/07/2018 08:45:00    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:444 /LUID:0000000000F3A74B.
20/07/2018 08:45:00    -	WinMain() Found the LUID parameter.
20/07/2018 08:45:00    -	WinMain() ullLuid: 0x0000000000F3A74B.
20/07/2018 08:45:00    -	SSOn_GetCredentials() 
20/07/2018 08:45:00    -	ExtractCredentialsFromHtc() 
20/07/2018 08:45:00    -	ExtractCredentialsFromHtc() Success = 1.
20/07/2018 08:45:00    -	SSOn_GetCredentials() Retrieved data of type '1'
20/07/2018 08:45:00    -	WinMain() Got semaphore.
20/07/2018 08:45:00    -	ConstructAclForObj() 
20/07/2018 08:45:00    -	GetProcessOwnerToken() 
20/07/2018 08:45:00    -	GetProcessOwnerToken() Creating local owner SID.
20/07/2018 08:45:00    -	GetProcessOwnerToken() Opened the current process.
20/07/2018 08:45:00    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
20/07/2018 08:45:00    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
20/07/2018 08:45:00    -	GetProcessOwnerToken() Got the buffer.
20/07/2018 08:45:00    -	GetProcessOwnerToken() Successfully acquired process owner's token.
20/07/2018 08:45:00    -	GetProcessOwnerToken() Return: 00934168.
20/07/2018 08:45:00    -	ConstructAclForObj() Got pTokenOwner.
20/07/2018 08:45:00    -	ConstructAclForObj() Got Owner SID
20/07/2018 08:45:00    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
20/07/2018 08:45:00    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
20/07/2018 08:45:00    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
20/07/2018 08:45:00    -	ConstructAclForObj() Return. Success: 1
20/07/2018 08:45:00    -	WinMain() Got ACL.
20/07/2018 08:45:00    -	CreateSSONRequestBrokerThread() 
20/07/2018 08:45:00    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 11528.
20/07/2018 08:45:00    -	CreateSSONPasswordChangeThread() 
20/07/2018 08:45:00  11528	SSONRequestBrokerThread() 
20/07/2018 08:45:00    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 6020.
20/07/2018 08:45:00  11528	GetFullInstallPath() 
20/07/2018 08:45:00    -	CreateSSONCredInjectionThread() 
20/07/2018 08:45:00  6020	SSONPasswordChangeThread() 
20/07/2018 08:45:00    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 15292.
20/07/2018 08:45:00    -	WinMain() Found the Imm32.dll library.
20/07/2018 08:45:00    -	WinMain() IME attachment disabled successfully.
20/07/2018 08:45:00  6020	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000002PC.
20/07/2018 08:45:00  15292	SSONCredInjectionThread() 
20/07/2018 08:45:00  6020	SSONPasswordChangeThread() Start named pipe service loop.
20/07/2018 08:45:00  15292	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000002CI.
20/07/2018 08:45:00  15292	SSONCredInjectionThread() Enter named pipe handler loop.
20/07/2018 08:45:00  11528	BuildSecurityAttributesForUser() 
20/07/2018 08:45:00  11528	ConstructAclForObj() 
20/07/2018 08:45:00  11528	GetProcessOwnerToken() 
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Creating local owner SID.
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Opened the current process.
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Opened the current process token. Get the token info.
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Got the buffer.
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Successfully acquired process owner's token.
20/07/2018 08:45:00  11528	GetProcessOwnerToken() Return: 009448A0.
20/07/2018 08:45:00  11528	ConstructAclForObj() Got pTokenOwner.
20/07/2018 08:45:00  11528	ConstructAclForObj() Got Owner SID
20/07/2018 08:45:00  11528	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
20/07/2018 08:45:00  11528	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
20/07/2018 08:45:00  11528	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
20/07/2018 08:45:00  11528	ConstructAclForObj() Return. Success: 1
20/07/2018 08:45:00  11528	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
20/07/2018 08:45:00    -	WinMain() Signal pnsson.
20/07/2018 08:45:00  11528	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000002.
20/07/2018 08:45:00  11528	SSONRequestBrokerThread() Pipe created. Handle messages now.
20/07/2018 08:45:00  11528	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:444 -Embedding'.
20/07/2018 08:45:26  11528	StoreLaunchedProcessHandle() 
20/07/2018 08:45:26  11528	StoreLaunchedProcessHandle() Saved handle 760 to WFCRUN process with PID 2076
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 08:45:26  11528	DisconnectPipeAndCloseHandles() 
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:45:26  11528	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:444 -Embedding'.
20/07/2018 08:46:28  11528	StoreLaunchedProcessHandle() 
20/07/2018 08:46:28  11528	StoreLaunchedProcessHandle() Saved handle 736 to AUTHMAN process with PID 14536
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 08:46:28  11528	DisconnectPipeAndCloseHandles() 
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 08:46:28  11528	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:444 -Embedding'.
20/07/2018 09:09:51  11528	StoreLaunchedProcessHandle() 
20/07/2018 09:09:51  11528	StoreLaunchedProcessHandle() Saved handle 596 to AUTHMAN process with PID 15452
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 09:09:51  11528	DisconnectPipeAndCloseHandles() 
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 09:09:51  11528	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() Received launch request
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() File verified.
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:444 -Embedding'.
20/07/2018 09:10:12  11528	StoreLaunchedProcessHandle() 
20/07/2018 09:10:12  11528	StoreLaunchedProcessHandle() Saved handle 740 to WFCRUN process with PID 11044
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
20/07/2018 09:10:12  11528	DisconnectPipeAndCloseHandles() 
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
20/07/2018 09:10:12  11528	SSONRequestBrokerThread_InnerLoop() 
20/07/2018 13:02:53    -	MyWndProc() MyWndProc: WM_QUERYSESSION
20/07/2018 13:02:53    -	MyWndProc() MyWndProc: WM_ENDSESSION
20/07/2018 13:02:53    -	WinMain() SsonSvr.exe Exiting
25/07/2018 06:57:00    -	WinMain() 
25/07/2018 06:57:00    -	WinMain() Initializing ssonsvr.
25/07/2018 06:57:00    -	IsUserSYSTEM() 
25/07/2018 06:57:00    -	IsUserSYSTEM() Result: 1.
25/07/2018 06:57:00    -	TerminationManager() 
25/07/2018 06:57:00    -	TerminationManager() Command line is NOT /TERMINATE.
25/07/2018 06:57:00    -	TerminationManager() WaitToTerminate thread created. ThreadID: 9544.
25/07/2018 06:57:00    -	IsSSOnEnabled() 
25/07/2018 06:57:00  9544	WaitToTerminate() 
25/07/2018 06:57:00    -	IsSSOnPolicyEnabled() 
25/07/2018 06:57:00    -	IsRegistryKeySetTo() Return: retVal: 0.
25/07/2018 06:57:00    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
25/07/2018 06:57:00    -	IsSmartCardLogon() 
25/07/2018 06:57:00    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
25/07/2018 06:57:00    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:452 /LUID:00000000028AD3C0.
25/07/2018 06:57:00    -	WinMain() Found the LUID parameter.
25/07/2018 06:57:00    -	WinMain() ullLuid: 0x00000000028AD3C0.
25/07/2018 06:57:00    -	SSOn_GetCredentials() 
25/07/2018 06:57:00    -	ExtractCredentialsFromHtc() 
25/07/2018 06:57:00    -	ExtractCredentialsFromHtc() Success = 1.
25/07/2018 06:57:00    -	SSOn_GetCredentials() Retrieved data of type '1'
25/07/2018 06:57:00    -	WinMain() Got semaphore.
25/07/2018 06:57:00    -	ConstructAclForObj() 
25/07/2018 06:57:00    -	GetProcessOwnerToken() 
25/07/2018 06:57:00    -	GetProcessOwnerToken() Creating local owner SID.
25/07/2018 06:57:00    -	GetProcessOwnerToken() Opened the current process.
25/07/2018 06:57:00    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
25/07/2018 06:57:00    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
25/07/2018 06:57:00    -	GetProcessOwnerToken() Got the buffer.
25/07/2018 06:57:00    -	GetProcessOwnerToken() Successfully acquired process owner's token.
25/07/2018 06:57:00    -	GetProcessOwnerToken() Return: 00AD4CF8.
25/07/2018 06:57:00    -	ConstructAclForObj() Got pTokenOwner.
25/07/2018 06:57:00    -	ConstructAclForObj() Got Owner SID
25/07/2018 06:57:00    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
25/07/2018 06:57:00    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
25/07/2018 06:57:00    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
25/07/2018 06:57:00    -	ConstructAclForObj() Return. Success: 1
25/07/2018 06:57:00    -	WinMain() Got ACL.
25/07/2018 06:57:00    -	CreateSSONRequestBrokerThread() 
25/07/2018 06:57:00    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 14600.
25/07/2018 06:57:00    -	CreateSSONPasswordChangeThread() 
25/07/2018 06:57:00  14600	SSONRequestBrokerThread() 
25/07/2018 06:57:00    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 8256.
25/07/2018 06:57:00  14600	GetFullInstallPath() 
25/07/2018 06:57:00    -	CreateSSONCredInjectionThread() 
25/07/2018 06:57:00  8256	SSONPasswordChangeThread() 
25/07/2018 06:57:00    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 13336.
25/07/2018 06:57:00    -	WinMain() Found the Imm32.dll library.
25/07/2018 06:57:00    -	WinMain() IME attachment disabled successfully.
25/07/2018 06:57:00  13336	SSONCredInjectionThread() 
25/07/2018 06:57:00  8256	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000003PC.
25/07/2018 06:57:00  8256	SSONPasswordChangeThread() Start named pipe service loop.
25/07/2018 06:57:00  13336	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000003CI.
25/07/2018 06:57:00  13336	SSONCredInjectionThread() Enter named pipe handler loop.
25/07/2018 06:57:00  14600	BuildSecurityAttributesForUser() 
25/07/2018 06:57:00  14600	ConstructAclForObj() 
25/07/2018 06:57:00  14600	GetProcessOwnerToken() 
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Creating local owner SID.
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Opened the current process.
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Opened the current process token. Get the token info.
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Got the buffer.
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Successfully acquired process owner's token.
25/07/2018 06:57:00  14600	GetProcessOwnerToken() Return: 00AF6478.
25/07/2018 06:57:00  14600	ConstructAclForObj() Got pTokenOwner.
25/07/2018 06:57:00  14600	ConstructAclForObj() Got Owner SID
25/07/2018 06:57:00  14600	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
25/07/2018 06:57:00  14600	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
25/07/2018 06:57:00  14600	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
25/07/2018 06:57:00    -	WinMain() Signal pnsson.
25/07/2018 06:57:00  14600	ConstructAclForObj() Return. Success: 1
25/07/2018 06:57:00  14600	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
25/07/2018 06:57:00  14600	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000003.
25/07/2018 06:57:00  14600	SSONRequestBrokerThread() Pipe created. Handle messages now.
25/07/2018 06:57:00  14600	SSONRequestBrokerThread_InnerLoop() 
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() Received launch request
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() File verified.
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:452 -Embedding'.
25/07/2018 06:57:27  14600	StoreLaunchedProcessHandle() 
25/07/2018 06:57:27  14600	StoreLaunchedProcessHandle() Saved handle 772 to WFCRUN process with PID 10484
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
25/07/2018 06:57:27  14600	DisconnectPipeAndCloseHandles() 
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
25/07/2018 06:57:27  14600	SSONRequestBrokerThread_InnerLoop() 
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() Received launch request
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() File verified.
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:452 -Embedding'.
25/07/2018 07:02:33  14600	StoreLaunchedProcessHandle() 
25/07/2018 07:02:33  14600	StoreLaunchedProcessHandle() Saved handle 816 to AUTHMAN process with PID 9548
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
25/07/2018 07:02:33  14600	DisconnectPipeAndCloseHandles() 
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
25/07/2018 07:02:33  14600	SSONRequestBrokerThread_InnerLoop() 
25/07/2018 16:17:16    -	MyWndProc() MyWndProc: WM_QUERYSESSION
25/07/2018 16:17:17    -	MyWndProc() MyWndProc: WM_ENDSESSION
26/07/2018 07:02:51    -	WinMain() 
26/07/2018 07:02:51    -	WinMain() Initializing ssonsvr.
26/07/2018 07:02:51    -	IsUserSYSTEM() 
26/07/2018 07:02:51    -	IsUserSYSTEM() Result: 1.
26/07/2018 07:02:51    -	TerminationManager() 
26/07/2018 07:02:51    -	TerminationManager() Command line is NOT /TERMINATE.
26/07/2018 07:02:51    -	TerminationManager() WaitToTerminate thread created. ThreadID: 2592.
26/07/2018 07:02:51    -	IsSSOnEnabled() 
26/07/2018 07:02:51  2592	WaitToTerminate() 
26/07/2018 07:02:51    -	IsSSOnPolicyEnabled() 
26/07/2018 07:02:51    -	IsRegistryKeySetTo() Return: retVal: 0.
26/07/2018 07:02:51    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
26/07/2018 07:02:51    -	IsSmartCardLogon() 
26/07/2018 07:02:51    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
26/07/2018 07:02:51    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000065EF4B9.
26/07/2018 07:02:51    -	WinMain() Found the LUID parameter.
26/07/2018 07:02:51    -	WinMain() ullLuid: 0x00000000065EF4B9.
26/07/2018 07:02:51    -	SSOn_GetCredentials() 
26/07/2018 07:02:51    -	ExtractCredentialsFromHtc() 
26/07/2018 07:02:51    -	ExtractCredentialsFromHtc() Success = 1.
26/07/2018 07:02:51    -	SSOn_GetCredentials() Retrieved data of type '1'
26/07/2018 07:02:51    -	WinMain() Got semaphore.
26/07/2018 07:02:51    -	ConstructAclForObj() 
26/07/2018 07:02:51    -	GetProcessOwnerToken() 
26/07/2018 07:02:51    -	GetProcessOwnerToken() Creating local owner SID.
26/07/2018 07:02:51    -	GetProcessOwnerToken() Opened the current process.
26/07/2018 07:02:51    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
26/07/2018 07:02:51    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
26/07/2018 07:02:51    -	GetProcessOwnerToken() Got the buffer.
26/07/2018 07:02:51    -	GetProcessOwnerToken() Successfully acquired process owner's token.
26/07/2018 07:02:51    -	GetProcessOwnerToken() Return: 00E74D40.
26/07/2018 07:02:51    -	ConstructAclForObj() Got pTokenOwner.
26/07/2018 07:02:51    -	ConstructAclForObj() Got Owner SID
26/07/2018 07:02:51    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
26/07/2018 07:02:51    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
26/07/2018 07:02:51    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
26/07/2018 07:02:51    -	ConstructAclForObj() Return. Success: 1
26/07/2018 07:02:51    -	WinMain() Got ACL.
26/07/2018 07:02:51    -	CreateSSONRequestBrokerThread() 
26/07/2018 07:02:51    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 11168.
26/07/2018 07:02:51    -	CreateSSONPasswordChangeThread() 
26/07/2018 07:02:51  11168	SSONRequestBrokerThread() 
26/07/2018 07:02:51    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 12664.
26/07/2018 07:02:51  11168	GetFullInstallPath() 
26/07/2018 07:02:51  12664	SSONPasswordChangeThread() 
26/07/2018 07:02:51    -	CreateSSONCredInjectionThread() 
26/07/2018 07:02:51    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 12328.
26/07/2018 07:02:51    -	WinMain() Found the Imm32.dll library.
26/07/2018 07:02:51    -	WinMain() IME attachment disabled successfully.
26/07/2018 07:02:51  12664	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000004PC.
26/07/2018 07:02:51  12328	SSONCredInjectionThread() 
26/07/2018 07:02:51  12664	SSONPasswordChangeThread() Start named pipe service loop.
26/07/2018 07:02:51  12328	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000004CI.
26/07/2018 07:02:51  12328	SSONCredInjectionThread() Enter named pipe handler loop.
26/07/2018 07:02:51  11168	BuildSecurityAttributesForUser() 
26/07/2018 07:02:51  11168	ConstructAclForObj() 
26/07/2018 07:02:51  11168	GetProcessOwnerToken() 
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Creating local owner SID.
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Opened the current process.
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Opened the current process token. Get the token info.
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Got the buffer.
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Successfully acquired process owner's token.
26/07/2018 07:02:51  11168	GetProcessOwnerToken() Return: 00E86818.
26/07/2018 07:02:51  11168	ConstructAclForObj() Got pTokenOwner.
26/07/2018 07:02:51  11168	ConstructAclForObj() Got Owner SID
26/07/2018 07:02:51  11168	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
26/07/2018 07:02:51  11168	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
26/07/2018 07:02:51  11168	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
26/07/2018 07:02:51  11168	ConstructAclForObj() Return. Success: 1
26/07/2018 07:02:51    -	WinMain() Signal pnsson.
26/07/2018 07:02:51  11168	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
26/07/2018 07:02:51  11168	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000004.
26/07/2018 07:02:51  11168	SSONRequestBrokerThread() Pipe created. Handle messages now.
26/07/2018 07:02:51  11168	SSONRequestBrokerThread_InnerLoop() 
26/07/2018 07:03:23  11168	SSONRequestBrokerThread_InnerLoop() Received launch request
26/07/2018 07:03:23  11168	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
26/07/2018 07:03:23  11168	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
26/07/2018 07:03:23  11168	SSONRequestBrokerThread_InnerLoop() File verified.
26/07/2018 07:03:23  11168	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
26/07/2018 07:03:24  11168	StoreLaunchedProcessHandle() 
26/07/2018 07:03:24  11168	StoreLaunchedProcessHandle() Saved handle 780 to WFCRUN process with PID 19588
26/07/2018 07:03:24  11168	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
26/07/2018 07:03:24  11168	DisconnectPipeAndCloseHandles() 
26/07/2018 07:03:24  11168	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
26/07/2018 07:03:24  11168	SSONRequestBrokerThread_InnerLoop() 
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() Received launch request
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() File verified.
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
26/07/2018 07:08:24  11168	StoreLaunchedProcessHandle() 
26/07/2018 07:08:24  11168	StoreLaunchedProcessHandle() Saved handle 812 to AUTHMAN process with PID 2148
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
26/07/2018 07:08:24  11168	DisconnectPipeAndCloseHandles() 
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
26/07/2018 07:08:24  11168	SSONRequestBrokerThread_InnerLoop() 
26/07/2018 16:05:29    -	MyWndProc() MyWndProc: WM_QUERYSESSION
26/07/2018 16:05:29    -	MyWndProc() MyWndProc: WM_ENDSESSION
26/07/2018 16:05:29    -	WinMain() SsonSvr.exe Exiting
27/07/2018 06:59:22    -	WinMain() 
27/07/2018 06:59:22    -	WinMain() Initializing ssonsvr.
27/07/2018 06:59:22    -	IsUserSYSTEM() 
27/07/2018 06:59:22    -	IsUserSYSTEM() Result: 1.
27/07/2018 06:59:22    -	TerminationManager() 
27/07/2018 06:59:22    -	TerminationManager() Command line is NOT /TERMINATE.
27/07/2018 06:59:22    -	TerminationManager() WaitToTerminate thread created. ThreadID: 13560.
27/07/2018 06:59:22    -	IsSSOnEnabled() 
27/07/2018 06:59:22  13560	WaitToTerminate() 
27/07/2018 06:59:22    -	IsSSOnPolicyEnabled() 
27/07/2018 06:59:22    -	IsRegistryKeySetTo() Return: retVal: 0.
27/07/2018 06:59:22    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
27/07/2018 06:59:22    -	IsSmartCardLogon() 
27/07/2018 06:59:22    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
27/07/2018 06:59:22    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:436 /LUID:000000000ABC81FA.
27/07/2018 06:59:22    -	WinMain() Found the LUID parameter.
27/07/2018 06:59:22    -	WinMain() ullLuid: 0x000000000ABC81FA.
27/07/2018 06:59:22    -	SSOn_GetCredentials() 
27/07/2018 06:59:22    -	ExtractCredentialsFromHtc() 
27/07/2018 06:59:22    -	ExtractCredentialsFromHtc() Success = 1.
27/07/2018 06:59:22    -	SSOn_GetCredentials() Retrieved data of type '1'
27/07/2018 06:59:22    -	WinMain() Got semaphore.
27/07/2018 06:59:22    -	ConstructAclForObj() 
27/07/2018 06:59:22    -	GetProcessOwnerToken() 
27/07/2018 06:59:22    -	GetProcessOwnerToken() Creating local owner SID.
27/07/2018 06:59:22    -	GetProcessOwnerToken() Opened the current process.
27/07/2018 06:59:22    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
27/07/2018 06:59:22    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
27/07/2018 06:59:22    -	GetProcessOwnerToken() Got the buffer.
27/07/2018 06:59:22    -	GetProcessOwnerToken() Successfully acquired process owner's token.
27/07/2018 06:59:22    -	GetProcessOwnerToken() Return: 001EE0D8.
27/07/2018 06:59:22    -	ConstructAclForObj() Got pTokenOwner.
27/07/2018 06:59:22    -	ConstructAclForObj() Got Owner SID
27/07/2018 06:59:22    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
27/07/2018 06:59:22    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
27/07/2018 06:59:22    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
27/07/2018 06:59:22    -	ConstructAclForObj() Return. Success: 1
27/07/2018 06:59:22    -	WinMain() Got ACL.
27/07/2018 06:59:22    -	CreateSSONRequestBrokerThread() 
27/07/2018 06:59:22    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 16908.
27/07/2018 06:59:22    -	CreateSSONPasswordChangeThread() 
27/07/2018 06:59:22    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 9376.
27/07/2018 06:59:22  16908	SSONRequestBrokerThread() 
27/07/2018 06:59:22    -	CreateSSONCredInjectionThread() 
27/07/2018 06:59:22  16908	GetFullInstallPath() 
27/07/2018 06:59:22    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 6732.
27/07/2018 06:59:22    -	WinMain() Found the Imm32.dll library.
27/07/2018 06:59:22    -	WinMain() IME attachment disabled successfully.
27/07/2018 06:59:22  9376	SSONPasswordChangeThread() 
27/07/2018 06:59:22  9376	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000005PC.
27/07/2018 06:59:22  6732	SSONCredInjectionThread() 
27/07/2018 06:59:22  9376	SSONPasswordChangeThread() Start named pipe service loop.
27/07/2018 06:59:22  6732	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000005CI.
27/07/2018 06:59:22  6732	SSONCredInjectionThread() Enter named pipe handler loop.
27/07/2018 06:59:22    -	WinMain() Signal pnsson.
27/07/2018 06:59:22  16908	BuildSecurityAttributesForUser() 
27/07/2018 06:59:22  16908	ConstructAclForObj() 
27/07/2018 06:59:22  16908	GetProcessOwnerToken() 
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Creating local owner SID.
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Opened the current process.
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Opened the current process token. Get the token info.
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Got the buffer.
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Successfully acquired process owner's token.
27/07/2018 06:59:22  16908	GetProcessOwnerToken() Return: 00205258.
27/07/2018 06:59:22  16908	ConstructAclForObj() Got pTokenOwner.
27/07/2018 06:59:22  16908	ConstructAclForObj() Got Owner SID
27/07/2018 06:59:22  16908	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
27/07/2018 06:59:22  16908	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
27/07/2018 06:59:22  16908	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
27/07/2018 06:59:22  16908	ConstructAclForObj() Return. Success: 1
27/07/2018 06:59:22  16908	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
27/07/2018 06:59:22  16908	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000005.
27/07/2018 06:59:22  16908	SSONRequestBrokerThread() Pipe created. Handle messages now.
27/07/2018 06:59:22  16908	SSONRequestBrokerThread_InnerLoop() 
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() Received launch request
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() File verified.
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:436 -Embedding'.
27/07/2018 07:00:07  16908	StoreLaunchedProcessHandle() 
27/07/2018 07:00:07  16908	StoreLaunchedProcessHandle() Saved handle 784 to WFCRUN process with PID 18464
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
27/07/2018 07:00:07  16908	DisconnectPipeAndCloseHandles() 
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
27/07/2018 07:00:07  16908	SSONRequestBrokerThread_InnerLoop() 
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() Received launch request
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() File verified.
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:436 -Embedding'.
27/07/2018 07:03:48  16908	StoreLaunchedProcessHandle() 
27/07/2018 07:03:48  16908	StoreLaunchedProcessHandle() Saved handle 808 to AUTHMAN process with PID 6976
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
27/07/2018 07:03:48  16908	DisconnectPipeAndCloseHandles() 
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
27/07/2018 07:03:48  16908	SSONRequestBrokerThread_InnerLoop() 
27/07/2018 13:02:22    -	MyWndProc() MyWndProc: WM_QUERYSESSION
27/07/2018 13:02:22    -	MyWndProc() MyWndProc: WM_ENDSESSION
27/07/2018 13:02:22    -	WinMain() SsonSvr.exe Exiting
30/07/2018 07:12:48    -	WinMain() 
30/07/2018 07:12:48    -	WinMain() Initializing ssonsvr.
30/07/2018 07:12:48    -	IsUserSYSTEM() 
30/07/2018 07:12:48    -	IsUserSYSTEM() Result: 1.
30/07/2018 07:12:48    -	TerminationManager() 
30/07/2018 07:12:48    -	TerminationManager() Command line is NOT /TERMINATE.
30/07/2018 07:12:48    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7052.
30/07/2018 07:12:48    -	IsSSOnEnabled() 
30/07/2018 07:12:48  7052	WaitToTerminate() 
30/07/2018 07:12:48    -	IsSSOnPolicyEnabled() 
30/07/2018 07:12:48    -	IsRegistryKeySetTo() Return: retVal: 0.
30/07/2018 07:12:48    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
30/07/2018 07:12:48    -	IsSmartCardLogon() 
30/07/2018 07:12:48    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
30/07/2018 07:12:48    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:108 /LUID:000000000D978208.
30/07/2018 07:12:48    -	WinMain() Found the LUID parameter.
30/07/2018 07:12:48    -	WinMain() ullLuid: 0x000000000D978208.
30/07/2018 07:12:48    -	SSOn_GetCredentials() 
30/07/2018 07:12:48    -	ExtractCredentialsFromHtc() 
30/07/2018 07:12:48    -	ExtractCredentialsFromHtc() Success = 1.
30/07/2018 07:12:48    -	SSOn_GetCredentials() Retrieved data of type '1'
30/07/2018 07:12:48    -	WinMain() Got semaphore.
30/07/2018 07:12:48    -	ConstructAclForObj() 
30/07/2018 07:12:48    -	GetProcessOwnerToken() 
30/07/2018 07:12:48    -	GetProcessOwnerToken() Creating local owner SID.
30/07/2018 07:12:48    -	GetProcessOwnerToken() Opened the current process.
30/07/2018 07:12:48    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
30/07/2018 07:12:48    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
30/07/2018 07:12:48    -	GetProcessOwnerToken() Got the buffer.
30/07/2018 07:12:48    -	GetProcessOwnerToken() Successfully acquired process owner's token.
30/07/2018 07:12:48    -	GetProcessOwnerToken() Return: 003546B8.
30/07/2018 07:12:48    -	ConstructAclForObj() Got pTokenOwner.
30/07/2018 07:12:48    -	ConstructAclForObj() Got Owner SID
30/07/2018 07:12:48    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
30/07/2018 07:12:48    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
30/07/2018 07:12:48    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
30/07/2018 07:12:48    -	ConstructAclForObj() Return. Success: 1
30/07/2018 07:12:48    -	WinMain() Got ACL.
30/07/2018 07:12:48    -	CreateSSONRequestBrokerThread() 
30/07/2018 07:12:48    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 9284.
30/07/2018 07:12:48    -	CreateSSONPasswordChangeThread() 
30/07/2018 07:12:48  9284	SSONRequestBrokerThread() 
30/07/2018 07:12:48    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 18188.
30/07/2018 07:12:48  9284	GetFullInstallPath() 
30/07/2018 07:12:48  18188	SSONPasswordChangeThread() 
30/07/2018 07:12:48    -	CreateSSONCredInjectionThread() 
30/07/2018 07:12:48    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 1444.
30/07/2018 07:12:48    -	WinMain() Found the Imm32.dll library.
30/07/2018 07:12:48    -	WinMain() IME attachment disabled successfully.
30/07/2018 07:12:48  18188	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000006PC.
30/07/2018 07:12:48  1444	SSONCredInjectionThread() 
30/07/2018 07:12:48  18188	SSONPasswordChangeThread() Start named pipe service loop.
30/07/2018 07:12:48  1444	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000006CI.
30/07/2018 07:12:48  1444	SSONCredInjectionThread() Enter named pipe handler loop.
30/07/2018 07:12:48  9284	BuildSecurityAttributesForUser() 
30/07/2018 07:12:48  9284	ConstructAclForObj() 
30/07/2018 07:12:48  9284	GetProcessOwnerToken() 
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Creating local owner SID.
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Opened the current process.
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Opened the current process token. Get the token info.
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Got the buffer.
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Successfully acquired process owner's token.
30/07/2018 07:12:48  9284	GetProcessOwnerToken() Return: 003648C8.
30/07/2018 07:12:48  9284	ConstructAclForObj() Got pTokenOwner.
30/07/2018 07:12:48  9284	ConstructAclForObj() Got Owner SID
30/07/2018 07:12:48  9284	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
30/07/2018 07:12:48  9284	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
30/07/2018 07:12:48  9284	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
30/07/2018 07:12:48    -	WinMain() Signal pnsson.
30/07/2018 07:12:48  9284	ConstructAclForObj() Return. Success: 1
30/07/2018 07:12:48  9284	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
30/07/2018 07:12:48  9284	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000006.
30/07/2018 07:12:48  9284	SSONRequestBrokerThread() Pipe created. Handle messages now.
30/07/2018 07:12:48  9284	SSONRequestBrokerThread_InnerLoop() 
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() Received launch request
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() File verified.
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:108 -Embedding'.
30/07/2018 07:13:23  9284	StoreLaunchedProcessHandle() 
30/07/2018 07:13:23  9284	StoreLaunchedProcessHandle() Saved handle 684 to WFCRUN process with PID 3892
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
30/07/2018 07:13:23  9284	DisconnectPipeAndCloseHandles() 
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
30/07/2018 07:13:23  9284	SSONRequestBrokerThread_InnerLoop() 
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() Received launch request
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() File verified.
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:108 -Embedding'.
30/07/2018 07:18:24  9284	StoreLaunchedProcessHandle() 
30/07/2018 07:18:24  9284	StoreLaunchedProcessHandle() Saved handle 832 to AUTHMAN process with PID 4300
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
30/07/2018 07:18:24  9284	DisconnectPipeAndCloseHandles() 
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
30/07/2018 07:18:24  9284	SSONRequestBrokerThread_InnerLoop() 
30/07/2018 12:45:37    -	MyWndProc() MyWndProc: WM_QUERYSESSION
30/07/2018 12:45:37    -	MyWndProc() MyWndProc: WM_ENDSESSION
30/07/2018 12:45:37    -	WinMain() SsonSvr.exe Exiting
30/07/2018 15:32:29    -	WinMain() 
30/07/2018 15:32:29    -	WinMain() Initializing ssonsvr.
30/07/2018 15:32:29    -	IsUserSYSTEM() 
30/07/2018 15:32:29    -	IsUserSYSTEM() Result: 1.
30/07/2018 15:32:29    -	TerminationManager() 
30/07/2018 15:32:29    -	TerminationManager() Command line is NOT /TERMINATE.
30/07/2018 15:32:29    -	TerminationManager() WaitToTerminate thread created. ThreadID: 4300.
30/07/2018 15:32:29    -	IsSSOnEnabled() 
30/07/2018 15:32:29  4300	WaitToTerminate() 
30/07/2018 15:32:29    -	IsSSOnPolicyEnabled() 
30/07/2018 15:32:29    -	IsRegistryKeySetTo() Return: retVal: 0.
30/07/2018 15:32:29    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
30/07/2018 15:32:29    -	IsSmartCardLogon() 
30/07/2018 15:32:29    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
30/07/2018 15:32:29    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:456 /LUID:00000000107208A9.
30/07/2018 15:32:29    -	WinMain() Found the LUID parameter.
30/07/2018 15:32:29    -	WinMain() ullLuid: 0x00000000107208A9.
30/07/2018 15:32:29    -	SSOn_GetCredentials() 
30/07/2018 15:32:29    -	ExtractCredentialsFromHtc() 
30/07/2018 15:32:29    -	ExtractCredentialsFromHtc() Success = 1.
30/07/2018 15:32:29    -	SSOn_GetCredentials() Retrieved data of type '1'
30/07/2018 15:32:29    -	WinMain() Got semaphore.
30/07/2018 15:32:29    -	ConstructAclForObj() 
30/07/2018 15:32:29    -	GetProcessOwnerToken() 
30/07/2018 15:32:29    -	GetProcessOwnerToken() Creating local owner SID.
30/07/2018 15:32:29    -	GetProcessOwnerToken() Opened the current process.
30/07/2018 15:32:29    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
30/07/2018 15:32:29    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
30/07/2018 15:32:29    -	GetProcessOwnerToken() Got the buffer.
30/07/2018 15:32:29    -	GetProcessOwnerToken() Successfully acquired process owner's token.
30/07/2018 15:32:29    -	GetProcessOwnerToken() Return: 008EF7E8.
30/07/2018 15:32:29    -	ConstructAclForObj() Got pTokenOwner.
30/07/2018 15:32:29    -	ConstructAclForObj() Got Owner SID
30/07/2018 15:32:29    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
30/07/2018 15:32:29    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
30/07/2018 15:32:29    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
30/07/2018 15:32:29    -	ConstructAclForObj() Return. Success: 1
30/07/2018 15:32:29    -	WinMain() Got ACL.
30/07/2018 15:32:29    -	CreateSSONRequestBrokerThread() 
30/07/2018 15:32:29    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 1460.
30/07/2018 15:32:29    -	CreateSSONPasswordChangeThread() 
30/07/2018 15:32:29  1460	SSONRequestBrokerThread() 
30/07/2018 15:32:29    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 5440.
30/07/2018 15:32:29  1460	GetFullInstallPath() 
30/07/2018 15:32:29    -	CreateSSONCredInjectionThread() 
30/07/2018 15:32:29  5440	SSONPasswordChangeThread() 
30/07/2018 15:32:29    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 16580.
30/07/2018 15:32:29    -	WinMain() Found the Imm32.dll library.
30/07/2018 15:32:29    -	WinMain() IME attachment disabled successfully.
30/07/2018 15:32:29  5440	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000007PC.
30/07/2018 15:32:29  16580	SSONCredInjectionThread() 
30/07/2018 15:32:29  5440	SSONPasswordChangeThread() Start named pipe service loop.
30/07/2018 15:32:29  16580	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000007CI.
30/07/2018 15:32:29  16580	SSONCredInjectionThread() Enter named pipe handler loop.
30/07/2018 15:32:29    -	WinMain() Signal pnsson.
30/07/2018 15:32:29  1460	BuildSecurityAttributesForUser() 
30/07/2018 15:32:29  1460	ConstructAclForObj() 
30/07/2018 15:32:29  1460	GetProcessOwnerToken() 
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Creating local owner SID.
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Opened the current process.
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Opened the current process token. Get the token info.
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Got the buffer.
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Successfully acquired process owner's token.
30/07/2018 15:32:29  1460	GetProcessOwnerToken() Return: 008EF628.
30/07/2018 15:32:29  1460	ConstructAclForObj() Got pTokenOwner.
30/07/2018 15:32:29  1460	ConstructAclForObj() Got Owner SID
30/07/2018 15:32:29  1460	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
30/07/2018 15:32:29  1460	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
30/07/2018 15:32:29  1460	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
30/07/2018 15:32:29  1460	ConstructAclForObj() Return. Success: 1
30/07/2018 15:32:29  1460	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
30/07/2018 15:32:29  1460	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000007.
30/07/2018 15:32:29  1460	SSONRequestBrokerThread() Pipe created. Handle messages now.
30/07/2018 15:32:29  1460	SSONRequestBrokerThread_InnerLoop() 
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() Received launch request
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() File verified.
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:456 -Embedding'.
30/07/2018 15:33:08  1460	StoreLaunchedProcessHandle() 
30/07/2018 15:33:08  1460	StoreLaunchedProcessHandle() Saved handle 792 to WFCRUN process with PID 3032
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
30/07/2018 15:33:08  1460	DisconnectPipeAndCloseHandles() 
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
30/07/2018 15:33:08  1460	SSONRequestBrokerThread_InnerLoop() 
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() Received launch request
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() File verified.
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:456 -Embedding'.
30/07/2018 15:38:08  1460	StoreLaunchedProcessHandle() 
30/07/2018 15:38:08  1460	StoreLaunchedProcessHandle() Saved handle 812 to AUTHMAN process with PID 19484
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
30/07/2018 15:38:08  1460	DisconnectPipeAndCloseHandles() 
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
30/07/2018 15:38:08  1460	SSONRequestBrokerThread_InnerLoop() 
30/07/2018 16:06:17    -	MyWndProc() MyWndProc: WM_QUERYSESSION
30/07/2018 16:06:17    -	MyWndProc() MyWndProc: WM_ENDSESSION
30/07/2018 16:06:17    -	WinMain() SsonSvr.exe Exiting
31/07/2018 07:10:56    -	WinMain() 
31/07/2018 07:10:56    -	WinMain() Initializing ssonsvr.
31/07/2018 07:10:56    -	IsUserSYSTEM() 
31/07/2018 07:10:56    -	IsUserSYSTEM() Result: 1.
31/07/2018 07:10:56    -	TerminationManager() 
31/07/2018 07:10:56    -	TerminationManager() Command line is NOT /TERMINATE.
31/07/2018 07:10:56    -	TerminationManager() WaitToTerminate thread created. ThreadID: 7964.
31/07/2018 07:10:56    -	IsSSOnEnabled() 
31/07/2018 07:10:56  7964	WaitToTerminate() 
31/07/2018 07:10:56    -	IsSSOnPolicyEnabled() 
31/07/2018 07:10:56    -	IsRegistryKeySetTo() Return: retVal: 0.
31/07/2018 07:10:56    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
31/07/2018 07:10:56    -	IsSmartCardLogon() 
31/07/2018 07:10:56    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
31/07/2018 07:10:56    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:460 /LUID:0000000010DCE9A8.
31/07/2018 07:10:56    -	WinMain() Found the LUID parameter.
31/07/2018 07:10:56    -	WinMain() ullLuid: 0x0000000010DCE9A8.
31/07/2018 07:10:56    -	SSOn_GetCredentials() 
31/07/2018 07:10:56    -	ExtractCredentialsFromHtc() 
31/07/2018 07:10:56    -	ExtractCredentialsFromHtc() Success = 1.
31/07/2018 07:10:56    -	SSOn_GetCredentials() Retrieved data of type '1'
31/07/2018 07:10:56    -	WinMain() Got semaphore.
31/07/2018 07:10:56    -	ConstructAclForObj() 
31/07/2018 07:10:56    -	GetProcessOwnerToken() 
31/07/2018 07:10:56    -	GetProcessOwnerToken() Creating local owner SID.
31/07/2018 07:10:56    -	GetProcessOwnerToken() Opened the current process.
31/07/2018 07:10:56    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
31/07/2018 07:10:56    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
31/07/2018 07:10:56    -	GetProcessOwnerToken() Got the buffer.
31/07/2018 07:10:56    -	GetProcessOwnerToken() Successfully acquired process owner's token.
31/07/2018 07:10:56    -	GetProcessOwnerToken() Return: 01004C78.
31/07/2018 07:10:56    -	ConstructAclForObj() Got pTokenOwner.
31/07/2018 07:10:56    -	ConstructAclForObj() Got Owner SID
31/07/2018 07:10:56    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
31/07/2018 07:10:56    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
31/07/2018 07:10:56    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
31/07/2018 07:10:56    -	ConstructAclForObj() Return. Success: 1
31/07/2018 07:10:56    -	WinMain() Got ACL.
31/07/2018 07:10:56    -	CreateSSONRequestBrokerThread() 
31/07/2018 07:10:56    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 18652.
31/07/2018 07:10:56    -	CreateSSONPasswordChangeThread() 
31/07/2018 07:10:56  18652	SSONRequestBrokerThread() 
31/07/2018 07:10:56    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 18552.
31/07/2018 07:10:56  18652	GetFullInstallPath() 
31/07/2018 07:10:56    -	CreateSSONCredInjectionThread() 
31/07/2018 07:10:56  18552	SSONPasswordChangeThread() 
31/07/2018 07:10:56    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 14524.
31/07/2018 07:10:56    -	WinMain() Found the Imm32.dll library.
31/07/2018 07:10:56    -	WinMain() IME attachment disabled successfully.
31/07/2018 07:10:56  18552	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000008PC.
31/07/2018 07:10:56  14524	SSONCredInjectionThread() 
31/07/2018 07:10:56  18552	SSONPasswordChangeThread() Start named pipe service loop.
31/07/2018 07:10:56  14524	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000008CI.
31/07/2018 07:10:56  14524	SSONCredInjectionThread() Enter named pipe handler loop.
31/07/2018 07:10:56  18652	BuildSecurityAttributesForUser() 
31/07/2018 07:10:56    -	WinMain() Signal pnsson.
31/07/2018 07:10:56  18652	ConstructAclForObj() 
31/07/2018 07:10:56  18652	GetProcessOwnerToken() 
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Creating local owner SID.
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Opened the current process.
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Opened the current process token. Get the token info.
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Got the buffer.
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Successfully acquired process owner's token.
31/07/2018 07:10:56  18652	GetProcessOwnerToken() Return: 01026370.
31/07/2018 07:10:56  18652	ConstructAclForObj() Got pTokenOwner.
31/07/2018 07:10:56  18652	ConstructAclForObj() Got Owner SID
31/07/2018 07:10:56  18652	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
31/07/2018 07:10:56  18652	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
31/07/2018 07:10:56  18652	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
31/07/2018 07:10:56  18652	ConstructAclForObj() Return. Success: 1
31/07/2018 07:10:56  18652	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
31/07/2018 07:10:56  18652	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000008.
31/07/2018 07:10:56  18652	SSONRequestBrokerThread() Pipe created. Handle messages now.
31/07/2018 07:10:56  18652	SSONRequestBrokerThread_InnerLoop() 
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() Received launch request
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() File verified.
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:460 -Embedding'.
31/07/2018 07:11:33  18652	StoreLaunchedProcessHandle() 
31/07/2018 07:11:33  18652	StoreLaunchedProcessHandle() Saved handle 788 to WFCRUN process with PID 7924
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
31/07/2018 07:11:33  18652	DisconnectPipeAndCloseHandles() 
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
31/07/2018 07:11:33  18652	SSONRequestBrokerThread_InnerLoop() 
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() Received launch request
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() File verified.
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:460 -Embedding'.
31/07/2018 07:16:33  18652	StoreLaunchedProcessHandle() 
31/07/2018 07:16:33  18652	StoreLaunchedProcessHandle() Saved handle 820 to AUTHMAN process with PID 8176
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
31/07/2018 07:16:33  18652	DisconnectPipeAndCloseHandles() 
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
31/07/2018 07:16:33  18652	SSONRequestBrokerThread_InnerLoop() 
31/07/2018 16:04:24    -	MyWndProc() MyWndProc: WM_QUERYSESSION
31/07/2018 16:04:24    -	MyWndProc() MyWndProc: WM_ENDSESSION
31/07/2018 16:04:24    -	WinMain() SsonSvr.exe Exiting
01/08/2018 06:58:18    -	WinMain() 
01/08/2018 06:58:18    -	WinMain() Initializing ssonsvr.
01/08/2018 06:58:18    -	IsUserSYSTEM() 
01/08/2018 06:58:18    -	IsUserSYSTEM() Result: 1.
01/08/2018 06:58:18    -	TerminationManager() 
01/08/2018 06:58:18    -	TerminationManager() Command line is NOT /TERMINATE.
01/08/2018 06:58:18    -	TerminationManager() WaitToTerminate thread created. ThreadID: 6548.
01/08/2018 06:58:18    -	IsSSOnEnabled() 
01/08/2018 06:58:18  6548	WaitToTerminate() 
01/08/2018 06:58:18    -	IsSSOnPolicyEnabled() 
01/08/2018 06:58:18    -	IsRegistryKeySetTo() Return: retVal: 0.
01/08/2018 06:58:18    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
01/08/2018 06:58:18    -	IsSmartCardLogon() 
01/08/2018 06:58:18    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
01/08/2018 06:58:18    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:432 /LUID:00000000148CD0C3.
01/08/2018 06:58:18    -	WinMain() Found the LUID parameter.
01/08/2018 06:58:18    -	WinMain() ullLuid: 0x00000000148CD0C3.
01/08/2018 06:58:18    -	SSOn_GetCredentials() 
01/08/2018 06:58:18    -	ExtractCredentialsFromHtc() 
01/08/2018 06:58:18    -	ExtractCredentialsFromHtc() Success = 1.
01/08/2018 06:58:18    -	SSOn_GetCredentials() Retrieved data of type '1'
01/08/2018 06:58:18    -	WinMain() Got semaphore.
01/08/2018 06:58:18    -	ConstructAclForObj() 
01/08/2018 06:58:18    -	GetProcessOwnerToken() 
01/08/2018 06:58:18    -	GetProcessOwnerToken() Creating local owner SID.
01/08/2018 06:58:18    -	GetProcessOwnerToken() Opened the current process.
01/08/2018 06:58:18    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
01/08/2018 06:58:18    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
01/08/2018 06:58:18    -	GetProcessOwnerToken() Got the buffer.
01/08/2018 06:58:18    -	GetProcessOwnerToken() Successfully acquired process owner's token.
01/08/2018 06:58:18    -	GetProcessOwnerToken() Return: 00405B48.
01/08/2018 06:58:18    -	ConstructAclForObj() Got pTokenOwner.
01/08/2018 06:58:18    -	ConstructAclForObj() Got Owner SID
01/08/2018 06:58:18    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
01/08/2018 06:58:18    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
01/08/2018 06:58:18    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
01/08/2018 06:58:18    -	ConstructAclForObj() Return. Success: 1
01/08/2018 06:58:18    -	WinMain() Got ACL.
01/08/2018 06:58:18    -	CreateSSONRequestBrokerThread() 
01/08/2018 06:58:18    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 12320.
01/08/2018 06:58:18    -	CreateSSONPasswordChangeThread() 
01/08/2018 06:58:18  12320	SSONRequestBrokerThread() 
01/08/2018 06:58:18    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 15148.
01/08/2018 06:58:18  12320	GetFullInstallPath() 
01/08/2018 06:58:18  15148	SSONPasswordChangeThread() 
01/08/2018 06:58:18    -	CreateSSONCredInjectionThread() 
01/08/2018 06:58:18    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 11072.
01/08/2018 06:58:18    -	WinMain() Found the Imm32.dll library.
01/08/2018 06:58:18    -	WinMain() IME attachment disabled successfully.
01/08/2018 06:58:18  15148	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON00000009PC.
01/08/2018 06:58:18  15148	SSONPasswordChangeThread() Start named pipe service loop.
01/08/2018 06:58:18  11072	SSONCredInjectionThread() 
01/08/2018 06:58:18  11072	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON00000009CI.
01/08/2018 06:58:18  11072	SSONCredInjectionThread() Enter named pipe handler loop.
01/08/2018 06:58:18  12320	BuildSecurityAttributesForUser() 
01/08/2018 06:58:18  12320	ConstructAclForObj() 
01/08/2018 06:58:18  12320	GetProcessOwnerToken() 
01/08/2018 06:58:18    -	WinMain() Signal pnsson.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Creating local owner SID.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Opened the current process.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Opened the current process token. Get the token info.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Got the buffer.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Successfully acquired process owner's token.
01/08/2018 06:58:18  12320	GetProcessOwnerToken() Return: 0041D7D0.
01/08/2018 06:58:18  12320	ConstructAclForObj() Got pTokenOwner.
01/08/2018 06:58:18  12320	ConstructAclForObj() Got Owner SID
01/08/2018 06:58:18  12320	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
01/08/2018 06:58:18  12320	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
01/08/2018 06:58:18  12320	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
01/08/2018 06:58:18  12320	ConstructAclForObj() Return. Success: 1
01/08/2018 06:58:18  12320	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
01/08/2018 06:58:18  12320	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON00000009.
01/08/2018 06:58:18  12320	SSONRequestBrokerThread() Pipe created. Handle messages now.
01/08/2018 06:58:18  12320	SSONRequestBrokerThread_InnerLoop() 
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() Received launch request
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() File verified.
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:432 -Embedding'.
01/08/2018 06:58:52  12320	StoreLaunchedProcessHandle() 
01/08/2018 06:58:52  12320	StoreLaunchedProcessHandle() Saved handle 792 to WFCRUN process with PID 9452
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
01/08/2018 06:58:52  12320	DisconnectPipeAndCloseHandles() 
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
01/08/2018 06:58:52  12320	SSONRequestBrokerThread_InnerLoop() 
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() Received launch request
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() File verified.
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:432 -Embedding'.
01/08/2018 07:02:16  12320	StoreLaunchedProcessHandle() 
01/08/2018 07:02:16  12320	StoreLaunchedProcessHandle() Saved handle 780 to AUTHMAN process with PID 6724
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
01/08/2018 07:02:16  12320	DisconnectPipeAndCloseHandles() 
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
01/08/2018 07:02:16  12320	SSONRequestBrokerThread_InnerLoop() 
01/08/2018 16:00:27    -	MyWndProc() MyWndProc: WM_QUERYSESSION
01/08/2018 16:00:27    -	MyWndProc() MyWndProc: WM_ENDSESSION
01/08/2018 16:00:27    -	WinMain() SsonSvr.exe Exiting
02/08/2018 07:00:51    -	WinMain() 
02/08/2018 07:00:51    -	WinMain() Initializing ssonsvr.
02/08/2018 07:00:51    -	IsUserSYSTEM() 
02/08/2018 07:00:51    -	IsUserSYSTEM() Result: 1.
02/08/2018 07:00:51    -	TerminationManager() 
02/08/2018 07:00:51    -	TerminationManager() Command line is NOT /TERMINATE.
02/08/2018 07:00:51    -	TerminationManager() WaitToTerminate thread created. ThreadID: 2192.
02/08/2018 07:00:51    -	IsSSOnEnabled() 
02/08/2018 07:00:51  2192	WaitToTerminate() 
02/08/2018 07:00:51    -	IsSSOnPolicyEnabled() 
02/08/2018 07:00:51    -	IsRegistryKeySetTo() Return: retVal: 0.
02/08/2018 07:00:51    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
02/08/2018 07:00:51    -	IsSmartCardLogon() 
02/08/2018 07:00:51    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
02/08/2018 07:00:51    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:432 /LUID:0000000018B884A1.
02/08/2018 07:00:51    -	WinMain() Found the LUID parameter.
02/08/2018 07:00:51    -	WinMain() ullLuid: 0x0000000018B884A1.
02/08/2018 07:00:51    -	SSOn_GetCredentials() 
02/08/2018 07:00:51    -	ExtractCredentialsFromHtc() 
02/08/2018 07:00:51    -	ExtractCredentialsFromHtc() Success = 1.
02/08/2018 07:00:51    -	SSOn_GetCredentials() Retrieved data of type '1'
02/08/2018 07:00:51    -	WinMain() Got semaphore.
02/08/2018 07:00:51    -	ConstructAclForObj() 
02/08/2018 07:00:51    -	GetProcessOwnerToken() 
02/08/2018 07:00:51    -	GetProcessOwnerToken() Creating local owner SID.
02/08/2018 07:00:51    -	GetProcessOwnerToken() Opened the current process.
02/08/2018 07:00:51    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
02/08/2018 07:00:51    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
02/08/2018 07:00:51    -	GetProcessOwnerToken() Got the buffer.
02/08/2018 07:00:51    -	GetProcessOwnerToken() Successfully acquired process owner's token.
02/08/2018 07:00:51    -	GetProcessOwnerToken() Return: 00F631E0.
02/08/2018 07:00:51    -	ConstructAclForObj() Got pTokenOwner.
02/08/2018 07:00:51    -	ConstructAclForObj() Got Owner SID
02/08/2018 07:00:51    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
02/08/2018 07:00:51    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
02/08/2018 07:00:51    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
02/08/2018 07:00:51    -	ConstructAclForObj() Return. Success: 1
02/08/2018 07:00:51    -	WinMain() Got ACL.
02/08/2018 07:00:51    -	CreateSSONRequestBrokerThread() 
02/08/2018 07:00:51    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 2360.
02/08/2018 07:00:51    -	CreateSSONPasswordChangeThread() 
02/08/2018 07:00:51    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 17200.
02/08/2018 07:00:51    -	CreateSSONCredInjectionThread() 
02/08/2018 07:00:51  17200	SSONPasswordChangeThread() 
02/08/2018 07:00:51    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 904.
02/08/2018 07:00:51    -	WinMain() Found the Imm32.dll library.
02/08/2018 07:00:51    -	WinMain() IME attachment disabled successfully.
02/08/2018 07:00:51  2360	SSONRequestBrokerThread() 
02/08/2018 07:00:51  2360	GetFullInstallPath() 
02/08/2018 07:00:51  17200	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON0000000APC.
02/08/2018 07:00:51  904	SSONCredInjectionThread() 
02/08/2018 07:00:51  17200	SSONPasswordChangeThread() Start named pipe service loop.
02/08/2018 07:00:51  904	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON0000000ACI.
02/08/2018 07:00:51  904	SSONCredInjectionThread() Enter named pipe handler loop.
02/08/2018 07:00:51    -	WinMain() Signal pnsson.
02/08/2018 07:00:51  2360	BuildSecurityAttributesForUser() 
02/08/2018 07:00:51  2360	ConstructAclForObj() 
02/08/2018 07:00:51  2360	GetProcessOwnerToken() 
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Creating local owner SID.
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Opened the current process.
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Opened the current process token. Get the token info.
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Got the buffer.
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Successfully acquired process owner's token.
02/08/2018 07:00:51  2360	GetProcessOwnerToken() Return: 00F75180.
02/08/2018 07:00:51  2360	ConstructAclForObj() Got pTokenOwner.
02/08/2018 07:00:51  2360	ConstructAclForObj() Got Owner SID
02/08/2018 07:00:51  2360	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
02/08/2018 07:00:51  2360	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
02/08/2018 07:00:51  2360	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
02/08/2018 07:00:51  2360	ConstructAclForObj() Return. Success: 1
02/08/2018 07:00:51  2360	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
02/08/2018 07:00:51  2360	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON0000000A.
02/08/2018 07:00:51  2360	SSONRequestBrokerThread() Pipe created. Handle messages now.
02/08/2018 07:00:51  2360	SSONRequestBrokerThread_InnerLoop() 
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() Received launch request
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() File verified.
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:432 -Embedding'.
02/08/2018 07:01:27  2360	StoreLaunchedProcessHandle() 
02/08/2018 07:01:27  2360	StoreLaunchedProcessHandle() Saved handle 788 to WFCRUN process with PID 13184
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
02/08/2018 07:01:27  2360	DisconnectPipeAndCloseHandles() 
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
02/08/2018 07:01:27  2360	SSONRequestBrokerThread_InnerLoop() 
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() Received launch request
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() File verified.
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:432 -Embedding'.
02/08/2018 07:06:27  2360	StoreLaunchedProcessHandle() 
02/08/2018 07:06:27  2360	StoreLaunchedProcessHandle() Saved handle 808 to AUTHMAN process with PID 3820
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
02/08/2018 07:06:27  2360	DisconnectPipeAndCloseHandles() 
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
02/08/2018 07:06:27  2360	SSONRequestBrokerThread_InnerLoop() 
02/08/2018 16:05:55    -	MyWndProc() MyWndProc: WM_QUERYSESSION
02/08/2018 16:05:55    -	MyWndProc() MyWndProc: WM_ENDSESSION
02/08/2018 16:05:55    -	WinMain() SsonSvr.exe Exiting
03/08/2018 06:52:21    -	WinMain() 
03/08/2018 06:52:21    -	WinMain() Initializing ssonsvr.
03/08/2018 06:52:21    -	IsUserSYSTEM() 
03/08/2018 06:52:21    -	IsUserSYSTEM() Result: 1.
03/08/2018 06:52:21    -	TerminationManager() 
03/08/2018 06:52:21    -	TerminationManager() Command line is NOT /TERMINATE.
03/08/2018 06:52:21    -	TerminationManager() WaitToTerminate thread created. ThreadID: 19832.
03/08/2018 06:52:21    -	IsSSOnEnabled() 
03/08/2018 06:52:21  19832	WaitToTerminate() 
03/08/2018 06:52:21    -	IsSSOnPolicyEnabled() 
03/08/2018 06:52:21    -	IsRegistryKeySetTo() Return: retVal: 0.
03/08/2018 06:52:21    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
03/08/2018 06:52:21    -	IsSmartCardLogon() 
03/08/2018 06:52:21    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
03/08/2018 06:52:21    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:416 /LUID:000000001D7804A7.
03/08/2018 06:52:21    -	WinMain() Found the LUID parameter.
03/08/2018 06:52:21    -	WinMain() ullLuid: 0x000000001D7804A7.
03/08/2018 06:52:21    -	SSOn_GetCredentials() 
03/08/2018 06:52:21    -	ExtractCredentialsFromHtc() 
03/08/2018 06:52:21    -	ExtractCredentialsFromHtc() Success = 1.
03/08/2018 06:52:21    -	SSOn_GetCredentials() Retrieved data of type '1'
03/08/2018 06:52:21    -	WinMain() Got semaphore.
03/08/2018 06:52:21    -	ConstructAclForObj() 
03/08/2018 06:52:21    -	GetProcessOwnerToken() 
03/08/2018 06:52:21    -	GetProcessOwnerToken() Creating local owner SID.
03/08/2018 06:52:21    -	GetProcessOwnerToken() Opened the current process.
03/08/2018 06:52:21    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
03/08/2018 06:52:21    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
03/08/2018 06:52:21    -	GetProcessOwnerToken() Got the buffer.
03/08/2018 06:52:21    -	GetProcessOwnerToken() Successfully acquired process owner's token.
03/08/2018 06:52:21    -	GetProcessOwnerToken() Return: 00614188.
03/08/2018 06:52:21    -	ConstructAclForObj() Got pTokenOwner.
03/08/2018 06:52:21    -	ConstructAclForObj() Got Owner SID
03/08/2018 06:52:21    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
03/08/2018 06:52:21    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
03/08/2018 06:52:21    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
03/08/2018 06:52:21    -	ConstructAclForObj() Return. Success: 1
03/08/2018 06:52:21    -	WinMain() Got ACL.
03/08/2018 06:52:21    -	CreateSSONRequestBrokerThread() 
03/08/2018 06:52:21    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 14664.
03/08/2018 06:52:21    -	CreateSSONPasswordChangeThread() 
03/08/2018 06:52:21  14664	SSONRequestBrokerThread() 
03/08/2018 06:52:21    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 18028.
03/08/2018 06:52:21  14664	GetFullInstallPath() 
03/08/2018 06:52:21  18028	SSONPasswordChangeThread() 
03/08/2018 06:52:21    -	CreateSSONCredInjectionThread() 
03/08/2018 06:52:21    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 8920.
03/08/2018 06:52:21    -	WinMain() Found the Imm32.dll library.
03/08/2018 06:52:21    -	WinMain() IME attachment disabled successfully.
03/08/2018 06:52:21  18028	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON0000000BPC.
03/08/2018 06:52:21  8920	SSONCredInjectionThread() 
03/08/2018 06:52:21  18028	SSONPasswordChangeThread() Start named pipe service loop.
03/08/2018 06:52:21  8920	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON0000000BCI.
03/08/2018 06:52:21  8920	SSONCredInjectionThread() Enter named pipe handler loop.
03/08/2018 06:52:21    -	WinMain() Signal pnsson.
03/08/2018 06:52:21  14664	BuildSecurityAttributesForUser() 
03/08/2018 06:52:21  14664	ConstructAclForObj() 
03/08/2018 06:52:21  14664	GetProcessOwnerToken() 
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Creating local owner SID.
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Opened the current process.
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Opened the current process token. Get the token info.
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Got the buffer.
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Successfully acquired process owner's token.
03/08/2018 06:52:21  14664	GetProcessOwnerToken() Return: 00625E28.
03/08/2018 06:52:21  14664	ConstructAclForObj() Got pTokenOwner.
03/08/2018 06:52:21  14664	ConstructAclForObj() Got Owner SID
03/08/2018 06:52:21  14664	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
03/08/2018 06:52:21  14664	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
03/08/2018 06:52:21  14664	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
03/08/2018 06:52:21  14664	ConstructAclForObj() Return. Success: 1
03/08/2018 06:52:21  14664	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
03/08/2018 06:52:21  14664	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON0000000B.
03/08/2018 06:52:21  14664	SSONRequestBrokerThread() Pipe created. Handle messages now.
03/08/2018 06:52:21  14664	SSONRequestBrokerThread_InnerLoop() 
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() Received launch request
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() File verified.
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:416 -Embedding'.
03/08/2018 06:53:01  14664	StoreLaunchedProcessHandle() 
03/08/2018 06:53:01  14664	StoreLaunchedProcessHandle() Saved handle 716 to WFCRUN process with PID 1940
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
03/08/2018 06:53:01  14664	DisconnectPipeAndCloseHandles() 
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
03/08/2018 06:53:01  14664	SSONRequestBrokerThread_InnerLoop() 
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() Received launch request
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() File verified.
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:416 -Embedding'.
03/08/2018 06:57:47  14664	StoreLaunchedProcessHandle() 
03/08/2018 06:57:47  14664	StoreLaunchedProcessHandle() Saved handle 788 to AUTHMAN process with PID 19144
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
03/08/2018 06:57:47  14664	DisconnectPipeAndCloseHandles() 
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
03/08/2018 06:57:47  14664	SSONRequestBrokerThread_InnerLoop() 
03/08/2018 13:00:51    -	MyWndProc() MyWndProc: WM_QUERYSESSION
03/08/2018 13:00:51    -	MyWndProc() MyWndProc: WM_ENDSESSION
03/08/2018 13:00:51    -	WinMain() SsonSvr.exe Exiting
06/08/2018 06:59:29    -	WinMain() 
06/08/2018 06:59:29    -	WinMain() Initializing ssonsvr.
06/08/2018 06:59:29    -	IsUserSYSTEM() 
06/08/2018 06:59:29    -	IsUserSYSTEM() Result: 1.
06/08/2018 06:59:29    -	TerminationManager() 
06/08/2018 06:59:29    -	TerminationManager() Command line is NOT /TERMINATE.
06/08/2018 06:59:29    -	TerminationManager() WaitToTerminate thread created. ThreadID: 20172.
06/08/2018 06:59:29    -	IsSSOnEnabled() 
06/08/2018 06:59:29  20172	WaitToTerminate() 
06/08/2018 06:59:29    -	IsSSOnPolicyEnabled() 
06/08/2018 06:59:29    -	IsRegistryKeySetTo() Return: retVal: 0.
06/08/2018 06:59:29    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
06/08/2018 06:59:29    -	IsSmartCardLogon() 
06/08/2018 06:59:29    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
06/08/2018 06:59:29    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:0000000020919E4F.
06/08/2018 06:59:29    -	WinMain() Found the LUID parameter.
06/08/2018 06:59:29    -	WinMain() ullLuid: 0x0000000020919E4F.
06/08/2018 06:59:29    -	SSOn_GetCredentials() 
06/08/2018 06:59:29    -	ExtractCredentialsFromHtc() 
06/08/2018 06:59:29    -	ExtractCredentialsFromHtc() Success = 1.
06/08/2018 06:59:29    -	SSOn_GetCredentials() Retrieved data of type '1'
06/08/2018 06:59:29    -	WinMain() Got semaphore.
06/08/2018 06:59:29    -	ConstructAclForObj() 
06/08/2018 06:59:29    -	GetProcessOwnerToken() 
06/08/2018 06:59:29    -	GetProcessOwnerToken() Creating local owner SID.
06/08/2018 06:59:29    -	GetProcessOwnerToken() Opened the current process.
06/08/2018 06:59:29    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
06/08/2018 06:59:29    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
06/08/2018 06:59:29    -	GetProcessOwnerToken() Got the buffer.
06/08/2018 06:59:29    -	GetProcessOwnerToken() Successfully acquired process owner's token.
06/08/2018 06:59:29    -	GetProcessOwnerToken() Return: 010448C0.
06/08/2018 06:59:29    -	ConstructAclForObj() Got pTokenOwner.
06/08/2018 06:59:29    -	ConstructAclForObj() Got Owner SID
06/08/2018 06:59:29    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
06/08/2018 06:59:29    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
06/08/2018 06:59:29    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
06/08/2018 06:59:29    -	ConstructAclForObj() Return. Success: 1
06/08/2018 06:59:29    -	WinMain() Got ACL.
06/08/2018 06:59:29    -	CreateSSONRequestBrokerThread() 
06/08/2018 06:59:29    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 19652.
06/08/2018 06:59:29    -	CreateSSONPasswordChangeThread() 
06/08/2018 06:59:29  19652	SSONRequestBrokerThread() 
06/08/2018 06:59:29    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 10084.
06/08/2018 06:59:29  19652	GetFullInstallPath() 
06/08/2018 06:59:29    -	CreateSSONCredInjectionThread() 
06/08/2018 06:59:29  10084	SSONPasswordChangeThread() 
06/08/2018 06:59:29    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 1308.
06/08/2018 06:59:29    -	WinMain() Found the Imm32.dll library.
06/08/2018 06:59:29    -	WinMain() IME attachment disabled successfully.
06/08/2018 06:59:29  10084	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON0000000CPC.
06/08/2018 06:59:29  1308	SSONCredInjectionThread() 
06/08/2018 06:59:29  10084	SSONPasswordChangeThread() Start named pipe service loop.
06/08/2018 06:59:29  1308	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON0000000CCI.
06/08/2018 06:59:29  1308	SSONCredInjectionThread() Enter named pipe handler loop.
06/08/2018 06:59:29  19652	BuildSecurityAttributesForUser() 
06/08/2018 06:59:29  19652	ConstructAclForObj() 
06/08/2018 06:59:29  19652	GetProcessOwnerToken() 
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Creating local owner SID.
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Opened the current process.
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Opened the current process token. Get the token info.
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Got the buffer.
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Successfully acquired process owner's token.
06/08/2018 06:59:29  19652	GetProcessOwnerToken() Return: 010556A8.
06/08/2018 06:59:29  19652	ConstructAclForObj() Got pTokenOwner.
06/08/2018 06:59:29  19652	ConstructAclForObj() Got Owner SID
06/08/2018 06:59:29  19652	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
06/08/2018 06:59:29  19652	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
06/08/2018 06:59:29  19652	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
06/08/2018 06:59:29  19652	ConstructAclForObj() Return. Success: 1
06/08/2018 06:59:29  19652	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
06/08/2018 06:59:29  19652	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON0000000C.
06/08/2018 06:59:29    -	WinMain() Signal pnsson.
06/08/2018 06:59:29  19652	SSONRequestBrokerThread() Pipe created. Handle messages now.
06/08/2018 06:59:29  19652	SSONRequestBrokerThread_InnerLoop() 
06/08/2018 07:00:02  19652	SSONRequestBrokerThread_InnerLoop() Received launch request
06/08/2018 07:00:02  19652	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
06/08/2018 07:00:02  19652	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
06/08/2018 07:00:02  19652	SSONRequestBrokerThread_InnerLoop() File verified.
06/08/2018 07:00:02  19652	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:448 -Embedding'.
06/08/2018 07:00:03  19652	StoreLaunchedProcessHandle() 
06/08/2018 07:00:03  19652	StoreLaunchedProcessHandle() Saved handle 792 to WFCRUN process with PID 15064
06/08/2018 07:00:03  19652	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
06/08/2018 07:00:03  19652	DisconnectPipeAndCloseHandles() 
06/08/2018 07:00:03  19652	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
06/08/2018 07:00:03  19652	SSONRequestBrokerThread_InnerLoop() 
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() Received launch request
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() File verified.
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:448 -Embedding'.
06/08/2018 07:02:27  19652	StoreLaunchedProcessHandle() 
06/08/2018 07:02:27  19652	StoreLaunchedProcessHandle() Saved handle 788 to AUTHMAN process with PID 22056
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
06/08/2018 07:02:27  19652	DisconnectPipeAndCloseHandles() 
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
06/08/2018 07:02:27  19652	SSONRequestBrokerThread_InnerLoop() 
06/08/2018 16:12:14    -	MyWndProc() MyWndProc: WM_QUERYSESSION
06/08/2018 16:12:14    -	MyWndProc() MyWndProc: WM_ENDSESSION
06/08/2018 16:12:14    -	WinMain() SsonSvr.exe Exiting
07/08/2018 07:00:36    -	WinMain() 
07/08/2018 07:00:36    -	WinMain() Initializing ssonsvr.
07/08/2018 07:00:36    -	IsUserSYSTEM() 
07/08/2018 07:00:36    -	IsUserSYSTEM() Result: 1.
07/08/2018 07:00:36    -	TerminationManager() 
07/08/2018 07:00:36    -	TerminationManager() Command line is NOT /TERMINATE.
07/08/2018 07:00:36    -	TerminationManager() WaitToTerminate thread created. ThreadID: 15456.
07/08/2018 07:00:36    -	IsSSOnEnabled() 
07/08/2018 07:00:36  15456	WaitToTerminate() 
07/08/2018 07:00:36    -	IsSSOnPolicyEnabled() 
07/08/2018 07:00:36    -	IsRegistryKeySetTo() Return: retVal: 0.
07/08/2018 07:00:36    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
07/08/2018 07:00:36    -	IsSmartCardLogon() 
07/08/2018 07:00:36    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
07/08/2018 07:00:36    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:444 /LUID:0000000024F95CEA.
07/08/2018 07:00:36    -	WinMain() Found the LUID parameter.
07/08/2018 07:00:36    -	WinMain() ullLuid: 0x0000000024F95CEA.
07/08/2018 07:00:36    -	SSOn_GetCredentials() 
07/08/2018 07:00:36    -	ExtractCredentialsFromHtc() 
07/08/2018 07:00:36    -	ExtractCredentialsFromHtc() Success = 1.
07/08/2018 07:00:36    -	SSOn_GetCredentials() Retrieved data of type '1'
07/08/2018 07:00:36    -	WinMain() Got semaphore.
07/08/2018 07:00:36    -	ConstructAclForObj() 
07/08/2018 07:00:36    -	GetProcessOwnerToken() 
07/08/2018 07:00:36    -	GetProcessOwnerToken() Creating local owner SID.
07/08/2018 07:00:36    -	GetProcessOwnerToken() Opened the current process.
07/08/2018 07:00:36    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
07/08/2018 07:00:36    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
07/08/2018 07:00:36    -	GetProcessOwnerToken() Got the buffer.
07/08/2018 07:00:36    -	GetProcessOwnerToken() Successfully acquired process owner's token.
07/08/2018 07:00:36    -	GetProcessOwnerToken() Return: 015B3928.
07/08/2018 07:00:36    -	ConstructAclForObj() Got pTokenOwner.
07/08/2018 07:00:36    -	ConstructAclForObj() Got Owner SID
07/08/2018 07:00:36    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
07/08/2018 07:00:36    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
07/08/2018 07:00:36    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
07/08/2018 07:00:36    -	ConstructAclForObj() Return. Success: 1
07/08/2018 07:00:36    -	WinMain() Got ACL.
07/08/2018 07:00:36    -	CreateSSONRequestBrokerThread() 
07/08/2018 07:00:36    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 4552.
07/08/2018 07:00:36    -	CreateSSONPasswordChangeThread() 
07/08/2018 07:00:36  4552	SSONRequestBrokerThread() 
07/08/2018 07:00:36    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 12048.
07/08/2018 07:00:36  4552	GetFullInstallPath() 
07/08/2018 07:00:36    -	CreateSSONCredInjectionThread() 
07/08/2018 07:00:36  12048	SSONPasswordChangeThread() 
07/08/2018 07:00:36    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 10816.
07/08/2018 07:00:36    -	WinMain() Found the Imm32.dll library.
07/08/2018 07:00:36    -	WinMain() IME attachment disabled successfully.
07/08/2018 07:00:36  12048	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON0000000DPC.
07/08/2018 07:00:36  12048	SSONPasswordChangeThread() Start named pipe service loop.
07/08/2018 07:00:36  10816	SSONCredInjectionThread() 
07/08/2018 07:00:36  10816	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON0000000DCI.
07/08/2018 07:00:36  10816	SSONCredInjectionThread() Enter named pipe handler loop.
07/08/2018 07:00:36  4552	BuildSecurityAttributesForUser() 
07/08/2018 07:00:36  4552	ConstructAclForObj() 
07/08/2018 07:00:36  4552	GetProcessOwnerToken() 
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Creating local owner SID.
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Opened the current process.
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Opened the current process token. Get the token info.
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Got the buffer.
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Successfully acquired process owner's token.
07/08/2018 07:00:36  4552	GetProcessOwnerToken() Return: 015C5558.
07/08/2018 07:00:36  4552	ConstructAclForObj() Got pTokenOwner.
07/08/2018 07:00:36  4552	ConstructAclForObj() Got Owner SID
07/08/2018 07:00:36  4552	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
07/08/2018 07:00:36  4552	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
07/08/2018 07:00:36  4552	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
07/08/2018 07:00:36  4552	ConstructAclForObj() Return. Success: 1
07/08/2018 07:00:36  4552	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
07/08/2018 07:00:36    -	WinMain() Signal pnsson.
07/08/2018 07:00:36  4552	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON0000000D.
07/08/2018 07:00:36  4552	SSONRequestBrokerThread() Pipe created. Handle messages now.
07/08/2018 07:00:36  4552	SSONRequestBrokerThread_InnerLoop() 
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() Received launch request
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() File verified.
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:444 -Embedding'.
07/08/2018 07:01:09  4552	StoreLaunchedProcessHandle() 
07/08/2018 07:01:09  4552	StoreLaunchedProcessHandle() Saved handle 788 to WFCRUN process with PID 22724
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
07/08/2018 07:01:09  4552	DisconnectPipeAndCloseHandles() 
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
07/08/2018 07:01:09  4552	SSONRequestBrokerThread_InnerLoop() 
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() Received launch request
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() File verified.
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:444 -Embedding'.
07/08/2018 07:06:09  4552	StoreLaunchedProcessHandle() 
07/08/2018 07:06:09  4552	StoreLaunchedProcessHandle() Saved handle 596 to AUTHMAN process with PID 19736
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
07/08/2018 07:06:09  4552	DisconnectPipeAndCloseHandles() 
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
07/08/2018 07:06:09  4552	SSONRequestBrokerThread_InnerLoop() 
07/08/2018 16:01:43    -	MyWndProc() MyWndProc: WM_QUERYSESSION
07/08/2018 16:01:43    -	MyWndProc() MyWndProc: WM_ENDSESSION
07/08/2018 16:01:43    -	WinMain() SsonSvr.exe Exiting
08/08/2018 06:59:26    -	WinMain() 
08/08/2018 06:59:26    -	WinMain() Initializing ssonsvr.
08/08/2018 06:59:26    -	IsUserSYSTEM() 
08/08/2018 06:59:26    -	IsUserSYSTEM() Result: 1.
08/08/2018 06:59:26    -	TerminationManager() 
08/08/2018 06:59:26    -	TerminationManager() Command line is NOT /TERMINATE.
08/08/2018 06:59:26    -	TerminationManager() WaitToTerminate thread created. ThreadID: 22592.
08/08/2018 06:59:26    -	IsSSOnEnabled() 
08/08/2018 06:59:26  22592	WaitToTerminate() 
08/08/2018 06:59:26    -	IsSSOnPolicyEnabled() 
08/08/2018 06:59:26    -	IsRegistryKeySetTo() Return: retVal: 0.
08/08/2018 06:59:26    -	IsSSOnPolicyEnabled() ICA Client Lockdown policy ENABLED
08/08/2018 06:59:26    -	IsSmartCardLogon() 
08/08/2018 06:59:26    -	IsSmartCardLogon() ERROR: Reading key value LastLoggedOnProvider. errCode: 234.
08/08/2018 06:59:26    -	WinMain() lpCmdLine: Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:108 /LUID:0000000029B2057F.
08/08/2018 06:59:26    -	WinMain() Found the LUID parameter.
08/08/2018 06:59:26    -	WinMain() ullLuid: 0x0000000029B2057F.
08/08/2018 06:59:26    -	SSOn_GetCredentials() 
08/08/2018 06:59:26    -	ExtractCredentialsFromHtc() 
08/08/2018 06:59:26    -	ExtractCredentialsFromHtc() Success = 1.
08/08/2018 06:59:26    -	SSOn_GetCredentials() Retrieved data of type '1'
08/08/2018 06:59:26    -	WinMain() Got semaphore.
08/08/2018 06:59:26    -	ConstructAclForObj() 
08/08/2018 06:59:26    -	GetProcessOwnerToken() 
08/08/2018 06:59:26    -	GetProcessOwnerToken() Creating local owner SID.
08/08/2018 06:59:26    -	GetProcessOwnerToken() Opened the current process.
08/08/2018 06:59:26    -	GetProcessOwnerToken() Opened the current process token. Get the token info.
08/08/2018 06:59:26    -	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
08/08/2018 06:59:26    -	GetProcessOwnerToken() Got the buffer.
08/08/2018 06:59:26    -	GetProcessOwnerToken() Successfully acquired process owner's token.
08/08/2018 06:59:26    -	GetProcessOwnerToken() Return: 015A3ED8.
08/08/2018 06:59:26    -	ConstructAclForObj() Got pTokenOwner.
08/08/2018 06:59:26    -	ConstructAclForObj() Got Owner SID
08/08/2018 06:59:26    -	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
08/08/2018 06:59:26    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
08/08/2018 06:59:26    -	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
08/08/2018 06:59:26    -	ConstructAclForObj() Return. Success: 1
08/08/2018 06:59:26    -	WinMain() Got ACL.
08/08/2018 06:59:26    -	CreateSSONRequestBrokerThread() 
08/08/2018 06:59:26    -	CreateSSONRequestBrokerThread() Thread created. SSONRequestBroker thread. Thread ID: 19952.
08/08/2018 06:59:26    -	CreateSSONPasswordChangeThread() 
08/08/2018 06:59:26  19952	SSONRequestBrokerThread() 
08/08/2018 06:59:26    -	CreateSSONPasswordChangeThread() Thread created. SSONPasswordChange thread. ThreadID: 7624.
08/08/2018 06:59:26  19952	GetFullInstallPath() 
08/08/2018 06:59:26    -	CreateSSONCredInjectionThread() 
08/08/2018 06:59:26  7624	SSONPasswordChangeThread() 
08/08/2018 06:59:26    -	CreateSSONCredInjectionThread() Thread created. SSONCredInjection thread. ThreadID: 6488.
08/08/2018 06:59:26    -	WinMain() Found the Imm32.dll library.
08/08/2018 06:59:26    -	WinMain() IME attachment disabled successfully.
08/08/2018 06:59:26  7624	SSONPasswordChangeThread() pipeNamePC: \\.\pipe\SSON0000000EPC.
08/08/2018 06:59:26  6488	SSONCredInjectionThread() 
08/08/2018 06:59:26  7624	SSONPasswordChangeThread() Start named pipe service loop.
08/08/2018 06:59:26  6488	SSONCredInjectionThread() pipeNameCI: \\.\pipe\SSON0000000ECI.
08/08/2018 06:59:26  6488	SSONCredInjectionThread() Enter named pipe handler loop.
08/08/2018 06:59:26    -	WinMain() Signal pnsson.
08/08/2018 06:59:26  19952	BuildSecurityAttributesForUser() 
08/08/2018 06:59:26  19952	ConstructAclForObj() 
08/08/2018 06:59:26  19952	GetProcessOwnerToken() 
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Creating local owner SID.
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Opened the current process.
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Opened the current process token. Get the token info.
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Insufficient buffer. Allocate a new buffer.
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Got the buffer.
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Successfully acquired process owner's token.
08/08/2018 06:59:26  19952	GetProcessOwnerToken() Return: 015B4FB0.
08/08/2018 06:59:26  19952	ConstructAclForObj() Got pTokenOwner.
08/08/2018 06:59:26  19952	ConstructAclForObj() Got Owner SID
08/08/2018 06:59:26  19952	ConstructAclForObj() Have an extra trustee. Set the extra trustee mask.
08/08/2018 06:59:26  19952	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 0.
08/08/2018 06:59:26  19952	ConstructAclForObj() Call AddAccessAllowedAce. dwLoop: 1.
08/08/2018 06:59:26  19952	ConstructAclForObj() Return. Success: 1
08/08/2018 06:59:26  19952	BuildSecurityAttributesForUser() Successfully set Security attributes for user.
08/08/2018 06:59:26  19952	SSONRequestBrokerThread() Create the RequestBroker named pipe. Name: \\.\pipe\SSON0000000E.
08/08/2018 06:59:26  19952	SSONRequestBrokerThread() Pipe created. Handle messages now.
08/08/2018 06:59:26  19952	SSONRequestBrokerThread_InnerLoop() 
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() Received launch request
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe.
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 0. Path: C:\Program Files (x86)\Citrix\ICA Client\WFCRUN32.EXE.
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() File verified.
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\ICA CLIENT\WFCRUN32.EXE" /HTC:108 -Embedding'.
08/08/2018 07:00:02  19952	StoreLaunchedProcessHandle() 
08/08/2018 07:00:02  19952	StoreLaunchedProcessHandle() Saved handle 796 to WFCRUN process with PID 21820
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
08/08/2018 07:00:02  19952	DisconnectPipeAndCloseHandles() 
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
08/08/2018 07:00:02  19952	SSONRequestBrokerThread_InnerLoop() 
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() Received launch request
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() Requested launch of C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe.
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() Call VerifyFile: Index: 1. Path: C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE.
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() File verified.
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() Launching '"C:\PROGRAM FILES (X86)\CITRIX\AUTHMANAGER\AUTHMANSVR.EXE" /HTC:108 -Embedding'.
08/08/2018 07:05:02  19952	StoreLaunchedProcessHandle() 
08/08/2018 07:05:02  19952	StoreLaunchedProcessHandle() Saved handle 720 to AUTHMAN process with PID 22948
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() Write to pipe. bLaunchSucceeded: 1.
08/08/2018 07:05:02  19952	DisconnectPipeAndCloseHandles() 
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() Return TRUE (success or non-terminal error)
08/08/2018 07:05:02  19952	SSONRequestBrokerThread_InnerLoop() 

 

trace-ssoncom.log

 

16/07/2018 07:51:40    -    WinMain() ssoncom /Embedding.
16/07/2018 07:51:40    -    WinMain() ssoncom: Embedding. Start factories.
16/07/2018 07:51:40    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
16/07/2018 07:51:40    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
16/07/2018 07:51:40    -    CLauncher::GetComPID() Return PID: 7408.
16/07/2018 07:51:40    -    CLauncher::LaunchSsonProc() 
16/07/2018 07:51:40    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001CC. luid: 0x0000000000099F02.
16/07/2018 07:51:40    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
16/07/2018 07:51:40    -    CLauncher::LaunchSsonProc() Got environment strings.
16/07/2018 07:51:40    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:460 /LUID:0000000000099F02.
16/07/2018 07:51:40    -    CLauncher::LaunchSsonProc() Return S_OK.
16/07/2018 07:51:40    -    CUnknown::FinalRelease() Increment reference count for final release.
16/07/2018 07:51:40    -    CLauncher::~CLauncher() Destroy self.
16/07/2018 07:51:40    -    WinMain() ssoncom: Embedding. Stop factories.
16/07/2018 07:51:40    -    WinMain() Exit ssoncom.
17/07/2018 06:47:41    -    WinMain() ssoncom /Embedding.
17/07/2018 06:47:41    -    WinMain() ssoncom: Embedding. Start factories.
17/07/2018 06:47:41    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 06:47:41    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 06:47:41    -    CLauncher::GetComPID() Return PID: 8104.
17/07/2018 06:47:41    -    CLauncher::LaunchSsonProc() 
17/07/2018 06:47:41    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C0. luid: 0x00000000000B1699.
17/07/2018 06:47:41    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
17/07/2018 06:47:41    -    CLauncher::LaunchSsonProc() Got environment strings.
17/07/2018 06:47:41    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000000B1699.
17/07/2018 06:47:41    -    CLauncher::LaunchSsonProc() Return S_OK.
17/07/2018 06:47:41    -    CUnknown::FinalRelease() Increment reference count for final release.
17/07/2018 06:47:41    -    CLauncher::~CLauncher() Destroy self.
17/07/2018 06:47:41    -    WinMain() ssoncom: Embedding. Stop factories.
17/07/2018 06:47:41    -    WinMain() Exit ssoncom.
17/07/2018 08:41:43    -    WinMain() ssoncom /Embedding.
17/07/2018 08:41:43    -    WinMain() ssoncom: Embedding. Start factories.
17/07/2018 08:41:43    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 08:41:43    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 08:41:43    -    CLauncher::GetComPID() Return PID: 7520.
17/07/2018 08:41:43    -    CLauncher::LaunchSsonProc() 
17/07/2018 08:41:43    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001E8. luid: 0x000000000042EAC9.
17/07/2018 08:41:43    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
17/07/2018 08:41:43    -    CLauncher::LaunchSsonProc() Got environment strings.
17/07/2018 08:41:43    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:488 /LUID:000000000042EAC9.
17/07/2018 08:41:43    -    CLauncher::LaunchSsonProc() Return S_OK.
17/07/2018 08:41:43    -    CUnknown::FinalRelease() Increment reference count for final release.
17/07/2018 08:41:43    -    CLauncher::~CLauncher() Destroy self.
17/07/2018 08:41:43    -    WinMain() ssoncom: Embedding. Stop factories.
17/07/2018 08:41:43    -    WinMain() Exit ssoncom.
17/07/2018 10:12:00    -    WinMain() ssoncom /Embedding.
17/07/2018 10:12:00    -    WinMain() ssoncom: Embedding. Start factories.
17/07/2018 10:12:00    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 10:12:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 10:12:00    -    CLauncher::GetComPID() Return PID: 7744.
17/07/2018 10:12:00    -    CLauncher::LaunchSsonProc() 
17/07/2018 10:12:00    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001B8. luid: 0x0000000000077A90.
17/07/2018 10:12:00    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
17/07/2018 10:12:00    -    CLauncher::LaunchSsonProc() Got environment strings.
17/07/2018 10:12:00    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:440 /LUID:0000000000077A90.
17/07/2018 10:12:00    -    CLauncher::LaunchSsonProc() Return S_OK.
17/07/2018 10:12:00    -    CUnknown::FinalRelease() Increment reference count for final release.
17/07/2018 10:12:00    -    CLauncher::~CLauncher() Destroy self.
17/07/2018 10:12:00    -    WinMain() ssoncom: Embedding. Stop factories.
17/07/2018 10:12:00    -    WinMain() Exit ssoncom.
17/07/2018 12:22:49    -    WinMain() ssoncom /Embedding.
17/07/2018 12:22:49    -    WinMain() ssoncom: Embedding. Start factories.
17/07/2018 12:22:49    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 12:22:49    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 12:22:50    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 12:22:50    -    CLauncher::GetComPID() Return PID: 12472.
17/07/2018 12:22:50    -    CLauncher::LaunchSsonProc() 
17/07/2018 12:22:50    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C8. luid: 0x0000000001014245.
17/07/2018 12:22:50    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
17/07/2018 12:22:50    -    CLauncher::LaunchSsonProc() Got environment strings.
17/07/2018 12:22:50    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:456 /LUID:0000000001014245.
17/07/2018 12:22:50    -    CLauncher::LaunchSsonProc() Return S_OK.
17/07/2018 12:22:50    -    CUnknown::FinalRelease() Increment reference count for final release.
17/07/2018 12:22:50    -    CLauncher::~CLauncher() Destroy self.
17/07/2018 12:22:50    -    WinMain() ssoncom: Embedding. Stop factories.
17/07/2018 12:22:50    -    WinMain() Exit ssoncom.
17/07/2018 13:47:05    -    WinMain() ssoncom /Embedding.
17/07/2018 13:47:05    -    WinMain() ssoncom: Embedding. Start factories.
17/07/2018 13:47:05    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 13:47:05    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 13:47:05    -    CLauncher::GetComPID() Return PID: 7176.
17/07/2018 13:47:05    -    CLauncher::LaunchSsonProc() 
17/07/2018 13:47:05    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001BC. luid: 0x0000000000066BB0.
17/07/2018 13:47:05    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
17/07/2018 13:47:05    -    CLauncher::LaunchSsonProc() Got environment strings.
17/07/2018 13:47:05    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:444 /LUID:0000000000066BB0.
17/07/2018 13:47:05    -    CLauncher::LaunchSsonProc() Return S_OK.
17/07/2018 13:47:05    -    CUnknown::FinalRelease() Increment reference count for final release.
17/07/2018 13:47:05    -    CLauncher::~CLauncher() Destroy self.
17/07/2018 13:47:05    -    WinMain() ssoncom: Embedding. Stop factories.
17/07/2018 13:47:05    -    WinMain() Exit ssoncom.
17/07/2018 15:10:19    -    WinMain() ssoncom /Embedding.
17/07/2018 15:10:19    -    WinMain() ssoncom: Embedding. Start factories.
17/07/2018 15:10:19    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
17/07/2018 15:10:19    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
17/07/2018 15:10:19    -    CLauncher::GetComPID() Return PID: 2460.
17/07/2018 15:10:19    -    CLauncher::LaunchSsonProc() 
17/07/2018 15:10:19    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001D0. luid: 0x00000000000D3FE3.
17/07/2018 15:10:19    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
17/07/2018 15:10:19    -    CLauncher::LaunchSsonProc() Got environment strings.
17/07/2018 15:10:19    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:464 /LUID:00000000000D3FE3.
17/07/2018 15:10:19    -    CLauncher::LaunchSsonProc() Return S_OK.
17/07/2018 15:10:19    -    CUnknown::FinalRelease() Increment reference count for final release.
17/07/2018 15:10:19    -    CLauncher::~CLauncher() Destroy self.
17/07/2018 15:10:19    -    WinMain() ssoncom: Embedding. Stop factories.
17/07/2018 15:10:19    -    WinMain() Exit ssoncom.
18/07/2018 07:06:49    -    WinMain() ssoncom /Embedding.
18/07/2018 07:06:49    -    WinMain() ssoncom: Embedding. Start factories.
18/07/2018 07:06:49    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
18/07/2018 07:06:49    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
18/07/2018 07:06:49    -    CLauncher::GetComPID() Return PID: 7396.
18/07/2018 07:06:49    -    CLauncher::LaunchSsonProc() 
18/07/2018 07:06:49    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C0. luid: 0x00000000000710F8.
18/07/2018 07:06:49    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
18/07/2018 07:06:49    -    CLauncher::LaunchSsonProc() Got environment strings.
18/07/2018 07:06:49    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000000710F8.
18/07/2018 07:06:49    -    CLauncher::LaunchSsonProc() Return S_OK.
18/07/2018 07:06:49    -    CUnknown::FinalRelease() Increment reference count for final release.
18/07/2018 07:06:49    -    CLauncher::~CLauncher() Destroy self.
18/07/2018 07:06:49    -    WinMain() ssoncom: Embedding. Stop factories.
18/07/2018 07:06:49    -    WinMain() Exit ssoncom.
19/07/2018 07:17:11    -    WinMain() ssoncom /Embedding.
19/07/2018 07:17:11    -    WinMain() ssoncom: Embedding. Start factories.
19/07/2018 07:17:11    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
19/07/2018 07:17:11    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
19/07/2018 07:17:11    -    CLauncher::GetComPID() Return PID: 2552.
19/07/2018 07:17:11    -    CLauncher::LaunchSsonProc() 
19/07/2018 07:17:11    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001B8. luid: 0x0000000000245CBE.
19/07/2018 07:17:11    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
19/07/2018 07:17:11    -    CLauncher::LaunchSsonProc() Got environment strings.
19/07/2018 07:17:11    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:440 /LUID:0000000000245CBE.
19/07/2018 07:17:11    -    CLauncher::LaunchSsonProc() Return S_OK.
19/07/2018 07:17:11    -    CUnknown::FinalRelease() Increment reference count for final release.
19/07/2018 07:17:11    -    CLauncher::~CLauncher() Destroy self.
19/07/2018 07:17:11    -    WinMain() ssoncom: Embedding. Stop factories.
19/07/2018 07:17:11    -    WinMain() Exit ssoncom.
20/07/2018 07:01:03    -    WinMain() ssoncom /Embedding.
20/07/2018 07:01:04    -    WinMain() ssoncom: Embedding. Start factories.
20/07/2018 07:01:04    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
20/07/2018 07:01:04    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 07:01:04    -    CLauncher::GetComPID() Return PID: 7156.
20/07/2018 07:01:04    -    CLauncher::LaunchSsonProc() 
20/07/2018 07:01:04    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C0. luid: 0x00000000000C71CC.
20/07/2018 07:01:04    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
20/07/2018 07:01:04    -    CLauncher::LaunchSsonProc() Got environment strings.
20/07/2018 07:01:04    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000000C71CC.
20/07/2018 07:01:04    -    CLauncher::LaunchSsonProc() Return S_OK.
20/07/2018 07:01:04    -    CUnknown::FinalRelease() Increment reference count for final release.
20/07/2018 07:01:04    -    CLauncher::~CLauncher() Destroy self.
20/07/2018 07:01:04    -    WinMain() ssoncom: Embedding. Stop factories.
20/07/2018 07:01:04    -    WinMain() Exit ssoncom.
20/07/2018 08:45:00    -    WinMain() ssoncom /Embedding.
20/07/2018 08:45:00    -    WinMain() ssoncom: Embedding. Start factories.
20/07/2018 08:45:00    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
20/07/2018 08:45:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
20/07/2018 08:45:00    -    CLauncher::GetComPID() Return PID: 16084.
20/07/2018 08:45:00    -    CLauncher::LaunchSsonProc() 
20/07/2018 08:45:00    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001BC. luid: 0x0000000000F3A74B.
20/07/2018 08:45:00    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
20/07/2018 08:45:00    -    CLauncher::LaunchSsonProc() Got environment strings.
20/07/2018 08:45:00    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:444 /LUID:0000000000F3A74B.
20/07/2018 08:45:00    -    CLauncher::LaunchSsonProc() Return S_OK.
20/07/2018 08:45:00    -    CUnknown::FinalRelease() Increment reference count for final release.
20/07/2018 08:45:00    -    CLauncher::~CLauncher() Destroy self.
20/07/2018 08:45:00    -    WinMain() ssoncom: Embedding. Stop factories.
20/07/2018 08:45:00    -    WinMain() Exit ssoncom.
25/07/2018 06:57:00    -    WinMain() ssoncom /Embedding.
25/07/2018 06:57:00    -    WinMain() ssoncom: Embedding. Start factories.
25/07/2018 06:57:00    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
25/07/2018 06:57:00    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
25/07/2018 06:57:00    -    CLauncher::GetComPID() Return PID: 10148.
25/07/2018 06:57:00    -    CLauncher::LaunchSsonProc() 
25/07/2018 06:57:00    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C4. luid: 0x00000000028AD3C0.
25/07/2018 06:57:00    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
25/07/2018 06:57:00    -    CLauncher::LaunchSsonProc() Got environment strings.
25/07/2018 06:57:00    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:452 /LUID:00000000028AD3C0.
25/07/2018 06:57:00    -    CLauncher::LaunchSsonProc() Return S_OK.
25/07/2018 06:57:00    -    CUnknown::FinalRelease() Increment reference count for final release.
25/07/2018 06:57:00    -    CLauncher::~CLauncher() Destroy self.
25/07/2018 06:57:00    -    WinMain() ssoncom: Embedding. Stop factories.
25/07/2018 06:57:00    -    WinMain() Exit ssoncom.
26/07/2018 07:02:51    -    WinMain() ssoncom /Embedding.
26/07/2018 07:02:51    -    WinMain() ssoncom: Embedding. Start factories.
26/07/2018 07:02:51    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
26/07/2018 07:02:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
26/07/2018 07:02:51    -    CLauncher::GetComPID() Return PID: 13060.
26/07/2018 07:02:51    -    CLauncher::LaunchSsonProc() 
26/07/2018 07:02:51    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C0. luid: 0x00000000065EF4B9.
26/07/2018 07:02:51    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
26/07/2018 07:02:51    -    CLauncher::LaunchSsonProc() Got environment strings.
26/07/2018 07:02:51    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:00000000065EF4B9.
26/07/2018 07:02:51    -    CLauncher::LaunchSsonProc() Return S_OK.
26/07/2018 07:02:51    -    CUnknown::FinalRelease() Increment reference count for final release.
26/07/2018 07:02:51    -    CLauncher::~CLauncher() Destroy self.
26/07/2018 07:02:51    -    WinMain() ssoncom: Embedding. Stop factories.
26/07/2018 07:02:51    -    WinMain() Exit ssoncom.
27/07/2018 06:59:22    -    WinMain() ssoncom /Embedding.
27/07/2018 06:59:22    -    WinMain() ssoncom: Embedding. Start factories.
27/07/2018 06:59:22    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
27/07/2018 06:59:22    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
27/07/2018 06:59:22    -    CLauncher::GetComPID() Return PID: 16016.
27/07/2018 06:59:22    -    CLauncher::LaunchSsonProc() 
27/07/2018 06:59:22    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001B4. luid: 0x000000000ABC81FA.
27/07/2018 06:59:22    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
27/07/2018 06:59:22    -    CLauncher::LaunchSsonProc() Got environment strings.
27/07/2018 06:59:22    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:436 /LUID:000000000ABC81FA.
27/07/2018 06:59:22    -    CLauncher::LaunchSsonProc() Return S_OK.
27/07/2018 06:59:22    -    CUnknown::FinalRelease() Increment reference count for final release.
27/07/2018 06:59:22    -    CLauncher::~CLauncher() Destroy self.
27/07/2018 06:59:22    -    WinMain() ssoncom: Embedding. Stop factories.
27/07/2018 06:59:22    -    WinMain() Exit ssoncom.
30/07/2018 07:12:48    -    WinMain() ssoncom /Embedding.
30/07/2018 07:12:48    -    WinMain() ssoncom: Embedding. Start factories.
30/07/2018 07:12:48    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
30/07/2018 07:12:48    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 07:12:48    -    CLauncher::GetComPID() Return PID: 1968.
30/07/2018 07:12:48    -    CLauncher::LaunchSsonProc() 
30/07/2018 07:12:48    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x000000000000006C. luid: 0x000000000D978208.
30/07/2018 07:12:48    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
30/07/2018 07:12:48    -    CLauncher::LaunchSsonProc() Got environment strings.
30/07/2018 07:12:48    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:108 /LUID:000000000D978208.
30/07/2018 07:12:48    -    CLauncher::LaunchSsonProc() Return S_OK.
30/07/2018 07:12:48    -    CUnknown::FinalRelease() Increment reference count for final release.
30/07/2018 07:12:48    -    CLauncher::~CLauncher() Destroy self.
30/07/2018 07:12:48    -    WinMain() ssoncom: Embedding. Stop factories.
30/07/2018 07:12:48    -    WinMain() Exit ssoncom.
30/07/2018 15:32:29    -    WinMain() ssoncom /Embedding.
30/07/2018 15:32:29    -    WinMain() ssoncom: Embedding. Start factories.
30/07/2018 15:32:29    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
30/07/2018 15:32:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
30/07/2018 15:32:29    -    CLauncher::GetComPID() Return PID: 8212.
30/07/2018 15:32:29    -    CLauncher::LaunchSsonProc() 
30/07/2018 15:32:29    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C8. luid: 0x00000000107208A9.
30/07/2018 15:32:29    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
30/07/2018 15:32:29    -    CLauncher::LaunchSsonProc() Got environment strings.
30/07/2018 15:32:29    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:456 /LUID:00000000107208A9.
30/07/2018 15:32:29    -    CLauncher::LaunchSsonProc() Return S_OK.
30/07/2018 15:32:29    -    CUnknown::FinalRelease() Increment reference count for final release.
30/07/2018 15:32:29    -    CLauncher::~CLauncher() Destroy self.
30/07/2018 15:32:29    -    WinMain() ssoncom: Embedding. Stop factories.
30/07/2018 15:32:29    -    WinMain() Exit ssoncom.
31/07/2018 07:10:56    -    WinMain() ssoncom /Embedding.
31/07/2018 07:10:56    -    WinMain() ssoncom: Embedding. Start factories.
31/07/2018 07:10:56    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
31/07/2018 07:10:56    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
31/07/2018 07:10:56    -    CLauncher::GetComPID() Return PID: 17404.
31/07/2018 07:10:56    -    CLauncher::LaunchSsonProc() 
31/07/2018 07:10:56    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001CC. luid: 0x0000000010DCE9A8.
31/07/2018 07:10:56    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
31/07/2018 07:10:56    -    CLauncher::LaunchSsonProc() Got environment strings.
31/07/2018 07:10:56    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:460 /LUID:0000000010DCE9A8.
31/07/2018 07:10:56    -    CLauncher::LaunchSsonProc() Return S_OK.
31/07/2018 07:10:56    -    CUnknown::FinalRelease() Increment reference count for final release.
31/07/2018 07:10:56    -    CLauncher::~CLauncher() Destroy self.
31/07/2018 07:10:56    -    WinMain() ssoncom: Embedding. Stop factories.
31/07/2018 07:10:56    -    WinMain() Exit ssoncom.
01/08/2018 06:58:18    -    WinMain() ssoncom /Embedding.
01/08/2018 06:58:18    -    WinMain() ssoncom: Embedding. Start factories.
01/08/2018 06:58:18    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
01/08/2018 06:58:18    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
01/08/2018 06:58:18    -    CLauncher::GetComPID() Return PID: 11108.
01/08/2018 06:58:18    -    CLauncher::LaunchSsonProc() 
01/08/2018 06:58:18    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001B0. luid: 0x00000000148CD0C3.
01/08/2018 06:58:18    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
01/08/2018 06:58:18    -    CLauncher::LaunchSsonProc() Got environment strings.
01/08/2018 06:58:18    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:432 /LUID:00000000148CD0C3.
01/08/2018 06:58:18    -    CLauncher::LaunchSsonProc() Return S_OK.
01/08/2018 06:58:18    -    CUnknown::FinalRelease() Increment reference count for final release.
01/08/2018 06:58:18    -    CLauncher::~CLauncher() Destroy self.
01/08/2018 06:58:18    -    WinMain() ssoncom: Embedding. Stop factories.
01/08/2018 06:58:18    -    WinMain() Exit ssoncom.
02/08/2018 07:00:51    -    WinMain() ssoncom /Embedding.
02/08/2018 07:00:51    -    WinMain() ssoncom: Embedding. Start factories.
02/08/2018 07:00:51    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
02/08/2018 07:00:51    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
02/08/2018 07:00:51    -    CLauncher::GetComPID() Return PID: 5036.
02/08/2018 07:00:51    -    CLauncher::LaunchSsonProc() 
02/08/2018 07:00:51    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001B0. luid: 0x0000000018B884A1.
02/08/2018 07:00:51    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
02/08/2018 07:00:51    -    CLauncher::LaunchSsonProc() Got environment strings.
02/08/2018 07:00:51    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:432 /LUID:0000000018B884A1.
02/08/2018 07:00:51    -    CLauncher::LaunchSsonProc() Return S_OK.
02/08/2018 07:00:51    -    CUnknown::FinalRelease() Increment reference count for final release.
02/08/2018 07:00:51    -    CLauncher::~CLauncher() Destroy self.
02/08/2018 07:00:51    -    WinMain() ssoncom: Embedding. Stop factories.
02/08/2018 07:00:51    -    WinMain() Exit ssoncom.
03/08/2018 06:52:21    -    WinMain() ssoncom /Embedding.
03/08/2018 06:52:21    -    WinMain() ssoncom: Embedding. Start factories.
03/08/2018 06:52:21    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
03/08/2018 06:52:21    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
03/08/2018 06:52:21    -    CLauncher::GetComPID() Return PID: 4552.
03/08/2018 06:52:21    -    CLauncher::LaunchSsonProc() 
03/08/2018 06:52:21    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001A0. luid: 0x000000001D7804A7.
03/08/2018 06:52:21    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
03/08/2018 06:52:21    -    CLauncher::LaunchSsonProc() Got environment strings.
03/08/2018 06:52:21    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:416 /LUID:000000001D7804A7.
03/08/2018 06:52:21    -    CLauncher::LaunchSsonProc() Return S_OK.
03/08/2018 06:52:21    -    CUnknown::FinalRelease() Increment reference count for final release.
03/08/2018 06:52:21    -    CLauncher::~CLauncher() Destroy self.
03/08/2018 06:52:21    -    WinMain() ssoncom: Embedding. Stop factories.
03/08/2018 06:52:21    -    WinMain() Exit ssoncom.
06/08/2018 06:59:29    -    WinMain() ssoncom /Embedding.
06/08/2018 06:59:29    -    WinMain() ssoncom: Embedding. Start factories.
06/08/2018 06:59:29    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
06/08/2018 06:59:29    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
06/08/2018 06:59:29    -    CLauncher::GetComPID() Return PID: 11100.
06/08/2018 06:59:29    -    CLauncher::LaunchSsonProc() 
06/08/2018 06:59:29    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001C0. luid: 0x0000000020919E4F.
06/08/2018 06:59:29    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
06/08/2018 06:59:29    -    CLauncher::LaunchSsonProc() Got environment strings.
06/08/2018 06:59:29    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:448 /LUID:0000000020919E4F.
06/08/2018 06:59:29    -    CLauncher::LaunchSsonProc() Return S_OK.
06/08/2018 06:59:29    -    CUnknown::FinalRelease() Increment reference count for final release.
06/08/2018 06:59:29    -    CLauncher::~CLauncher() Destroy self.
06/08/2018 06:59:29    -    WinMain() ssoncom: Embedding. Stop factories.
06/08/2018 06:59:29    -    WinMain() Exit ssoncom.
07/08/2018 07:00:35    -    WinMain() ssoncom /Embedding.
07/08/2018 07:00:35    -    WinMain() ssoncom: Embedding. Start factories.
07/08/2018 07:00:35    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
07/08/2018 07:00:35    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
07/08/2018 07:00:35    -    CLauncher::GetComPID() Return PID: 18364.
07/08/2018 07:00:35    -    CLauncher::LaunchSsonProc() 
07/08/2018 07:00:35    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x00000000000001BC. luid: 0x0000000024F95CEA.
07/08/2018 07:00:35    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
07/08/2018 07:00:35    -    CLauncher::LaunchSsonProc() Got environment strings.
07/08/2018 07:00:35    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:444 /LUID:0000000024F95CEA.
07/08/2018 07:00:36    -    CLauncher::LaunchSsonProc() Return S_OK.
07/08/2018 07:00:36    -    CUnknown::FinalRelease() Increment reference count for final release.
07/08/2018 07:00:36    -    CLauncher::~CLauncher() Destroy self.
07/08/2018 07:00:36    -    WinMain() ssoncom: Embedding. Stop factories.
07/08/2018 07:00:36    -    WinMain() Exit ssoncom.
08/08/2018 06:59:25    -    WinMain() ssoncom /Embedding.
08/08/2018 06:59:25    -    WinMain() ssoncom: Embedding. Start factories.
08/08/2018 06:59:25    -    CUnknown::CUnknown() Not aggregating; delegate to nondelegating IUnknown.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() The COM Library asked for IMarshal. Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:25    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
08/08/2018 06:59:26    -    CLauncher::NondelegatingQueryInterface() The client asked for ILauncher.
08/08/2018 06:59:26    -    CLauncher::NondelegatingQueryInterface() Return NondelegatingQueryInterface.
08/08/2018 06:59:26    -    CLauncher::GetComPID() Return PID: 18444.
08/08/2018 06:59:26    -    CLauncher::LaunchSsonProc() 
08/08/2018 06:59:26    -    CLauncher::LaunchSsonProc() wszPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. wszDesktopName: Winsta0\Default. hMapFile: 0x000000000000006C. luid: 0x0000000029B2057F.
08/08/2018 06:59:26    -    CLauncher::LaunchSsonProc() pPath verified: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe.
08/08/2018 06:59:26    -    CLauncher::LaunchSsonProc() Got environment strings.
08/08/2018 06:59:26    -    CLauncher::LaunchSsonProc() Create process. pPath: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe. szArguments: C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:108 /LUID:0000000029B2057F.
08/08/2018 06:59:26    -    CLauncher::LaunchSsonProc() Return S_OK.
08/08/2018 06:59:26    -    CUnknown::FinalRelease() Increment reference count for final release.
08/08/2018 06:59:26    -    CLauncher::~CLauncher() Destroy self.
08/08/2018 06:59:26    -    WinMain() ssoncom: Embedding. Stop factories.
08/08/2018 06:59:26    -    WinMain() Exit ssoncom.
 

 

trace-pnsson.log

 

17/07/2018 13:47:05    -	NPLogonNotify() 
17/07/2018 13:47:05    -	NPLogonNotify() Got the logon session data.
17/07/2018 13:47:05    -	TraceLogonInfo() 
17/07/2018 13:47:05    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
17/07/2018 13:47:05    -	TraceLogonInfo() MessageType  : 0
17/07/2018 13:47:05    -	TraceLogonInfo() UserName     : Dude
17/07/2018 13:47:05    -	TraceLogonInfo() Domain       : Knowhere
17/07/2018 13:47:05    -	TraceLogonInfo() Password     : Is Present
17/07/2018 13:47:05    -	TraceLogonInfo() Station Name : Winsta0
17/07/2018 13:47:05    -	TraceLogonInfo() LUID         : 0,420784
17/07/2018 13:47:05    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
17/07/2018 13:47:05    -	GetNpProcPath() 
17/07/2018 13:47:05    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
17/07/2018 13:47:05    -	GetSSonSvrProcPath() 
17/07/2018 13:47:05    -	GetSSonSvrProcPath() Return. bRet: 1.
17/07/2018 13:47:05    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
17/07/2018 13:47:05    -	ShouldInjectCredentialsToSSOn() 
17/07/2018 13:47:05    -	SSOn_PackCredentials() Type is '1'
17/07/2018 13:47:05    -	SSOn_PackCredentials() Success = 1
17/07/2018 13:47:05    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
17/07/2018 13:47:05    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
17/07/2018 13:47:05    -	LaunchSsonUsingCom() Return: bRet: 1.
17/07/2018 13:47:05    -	CaptureLogonInfo() Wait for ssonsvr sync up.
17/07/2018 13:47:05    -	CaptureLogonInfo() After wait for ssonsvr sync up.
17/07/2018 13:47:05    -	CaptureLogonInfo() Return. bRet: 1.
17/07/2018 15:10:19    -	NPLogonNotify() 
17/07/2018 15:10:19    -	NPLogonNotify() Got the logon session data.
17/07/2018 15:10:19    -	TraceLogonInfo() 
17/07/2018 15:10:19    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
17/07/2018 15:10:19    -	TraceLogonInfo() MessageType  : 0
17/07/2018 15:10:19    -	TraceLogonInfo() UserName     : Dude
17/07/2018 15:10:19    -	TraceLogonInfo() Domain       : Knowhere
17/07/2018 15:10:19    -	TraceLogonInfo() Password     : Is Present
17/07/2018 15:10:19    -	TraceLogonInfo() Station Name : Winsta0
17/07/2018 15:10:19    -	TraceLogonInfo() LUID         : 0,868323
17/07/2018 15:10:19    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
17/07/2018 15:10:19    -	GetNpProcPath() 
17/07/2018 15:10:19    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
17/07/2018 15:10:19    -	GetSSonSvrProcPath() 
17/07/2018 15:10:19    -	GetSSonSvrProcPath() Return. bRet: 1.
17/07/2018 15:10:19    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
17/07/2018 15:10:19    -	ShouldInjectCredentialsToSSOn() 
17/07/2018 15:10:19    -	SSOn_PackCredentials() Type is '1'
17/07/2018 15:10:19    -	SSOn_PackCredentials() Success = 1
17/07/2018 15:10:19    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
17/07/2018 15:10:19    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
17/07/2018 15:10:19    -	LaunchSsonUsingCom() Return: bRet: 1.
17/07/2018 15:10:19    -	CaptureLogonInfo() Wait for ssonsvr sync up.
17/07/2018 15:10:20    -	CaptureLogonInfo() After wait for ssonsvr sync up.
17/07/2018 15:10:20    -	CaptureLogonInfo() Return. bRet: 1.
18/07/2018 07:06:49    -	NPLogonNotify() 
18/07/2018 07:06:49    -	NPLogonNotify() Got the logon session data.
18/07/2018 07:06:49    -	TraceLogonInfo() 
18/07/2018 07:06:49    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
18/07/2018 07:06:49    -	TraceLogonInfo() MessageType  : 0
18/07/2018 07:06:49    -	TraceLogonInfo() UserName     : Dude
18/07/2018 07:06:49    -	TraceLogonInfo() Domain       : Knowhere
18/07/2018 07:06:49    -	TraceLogonInfo() Password     : Is Present
18/07/2018 07:06:49    -	TraceLogonInfo() Station Name : Winsta0
18/07/2018 07:06:49    -	TraceLogonInfo() LUID         : 0,463096
18/07/2018 07:06:49    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
18/07/2018 07:06:49    -	GetNpProcPath() 
18/07/2018 07:06:49    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
18/07/2018 07:06:49    -	GetSSonSvrProcPath() 
18/07/2018 07:06:49    -	GetSSonSvrProcPath() Return. bRet: 1.
18/07/2018 07:06:49    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
18/07/2018 07:06:49    -	ShouldInjectCredentialsToSSOn() 
18/07/2018 07:06:49    -	SSOn_PackCredentials() Type is '1'
18/07/2018 07:06:49    -	SSOn_PackCredentials() Success = 1
18/07/2018 07:06:49    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
18/07/2018 07:06:49    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
18/07/2018 07:06:49    -	LaunchSsonUsingCom() Return: bRet: 1.
18/07/2018 07:06:49    -	CaptureLogonInfo() Wait for ssonsvr sync up.
18/07/2018 07:06:49    -	CaptureLogonInfo() After wait for ssonsvr sync up.
18/07/2018 07:06:49    -	CaptureLogonInfo() Return. bRet: 1.
19/07/2018 07:17:11    -	NPLogonNotify() 
19/07/2018 07:17:11    -	NPLogonNotify() Got the logon session data.
19/07/2018 07:17:11    -	TraceLogonInfo() 
19/07/2018 07:17:11    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
19/07/2018 07:17:11    -	TraceLogonInfo() MessageType  : 0
19/07/2018 07:17:11    -	TraceLogonInfo() UserName     : Dude
19/07/2018 07:17:11    -	TraceLogonInfo() Domain       : Knowhere
19/07/2018 07:17:11    -	TraceLogonInfo() Password     : Is Present
19/07/2018 07:17:11    -	TraceLogonInfo() Station Name : Winsta0
19/07/2018 07:17:11    -	TraceLogonInfo() LUID         : 0,2383038
19/07/2018 07:17:11    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
19/07/2018 07:17:11    -	GetNpProcPath() 
19/07/2018 07:17:11    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
19/07/2018 07:17:11    -	GetSSonSvrProcPath() 
19/07/2018 07:17:11    -	GetSSonSvrProcPath() Return. bRet: 1.
19/07/2018 07:17:11    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
19/07/2018 07:17:11    -	ShouldInjectCredentialsToSSOn() 
19/07/2018 07:17:11    -	SSOn_PackCredentials() Type is '1'
19/07/2018 07:17:11    -	SSOn_PackCredentials() Success = 1
19/07/2018 07:17:11    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
19/07/2018 07:17:11    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
19/07/2018 07:17:11    -	LaunchSsonUsingCom() Return: bRet: 1.
19/07/2018 07:17:11    -	CaptureLogonInfo() Wait for ssonsvr sync up.
19/07/2018 07:17:11    -	CaptureLogonInfo() After wait for ssonsvr sync up.
19/07/2018 07:17:11    -	CaptureLogonInfo() Return. bRet: 1.
20/07/2018 07:01:03    -	NPLogonNotify() 
20/07/2018 07:01:03    -	NPLogonNotify() Got the logon session data.
20/07/2018 07:01:03    -	TraceLogonInfo() 
20/07/2018 07:01:03    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
20/07/2018 07:01:03    -	TraceLogonInfo() MessageType  : 0
20/07/2018 07:01:03    -	TraceLogonInfo() UserName     : Dude
20/07/2018 07:01:03    -	TraceLogonInfo() Domain       : Knowhere
20/07/2018 07:01:03    -	TraceLogonInfo() Password     : Is Present
20/07/2018 07:01:03    -	TraceLogonInfo() Station Name : Winsta0
20/07/2018 07:01:03    -	TraceLogonInfo() LUID         : 0,815564
20/07/2018 07:01:03    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
20/07/2018 07:01:03    -	GetNpProcPath() 
20/07/2018 07:01:03    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
20/07/2018 07:01:03    -	GetSSonSvrProcPath() 
20/07/2018 07:01:03    -	GetSSonSvrProcPath() Return. bRet: 1.
20/07/2018 07:01:03    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
20/07/2018 07:01:03    -	ShouldInjectCredentialsToSSOn() 
20/07/2018 07:01:03    -	SSOn_PackCredentials() Type is '1'
20/07/2018 07:01:03    -	SSOn_PackCredentials() Success = 1
20/07/2018 07:01:03    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
20/07/2018 07:01:04    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
20/07/2018 07:01:04    -	LaunchSsonUsingCom() Return: bRet: 1.
20/07/2018 07:01:04    -	CaptureLogonInfo() Wait for ssonsvr sync up.
20/07/2018 07:01:04    -	CaptureLogonInfo() After wait for ssonsvr sync up.
20/07/2018 07:01:04    -	CaptureLogonInfo() Return. bRet: 1.
20/07/2018 08:45:00    -	NPLogonNotify() 
20/07/2018 08:45:00    -	NPLogonNotify() Got the logon session data.
20/07/2018 08:45:00    -	TraceLogonInfo() 
20/07/2018 08:45:00    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
20/07/2018 08:45:00    -	TraceLogonInfo() MessageType  : 0
20/07/2018 08:45:00    -	TraceLogonInfo() UserName     : Dude
20/07/2018 08:45:00    -	TraceLogonInfo() Domain       : Knowhere
20/07/2018 08:45:00    -	TraceLogonInfo() Password     : Is Present
20/07/2018 08:45:00    -	TraceLogonInfo() Station Name : Winsta0
20/07/2018 08:45:00    -	TraceLogonInfo() LUID         : 0,15968075
20/07/2018 08:45:00    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
20/07/2018 08:45:00    -	GetNpProcPath() 
20/07/2018 08:45:00    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
20/07/2018 08:45:00    -	GetSSonSvrProcPath() 
20/07/2018 08:45:00    -	GetSSonSvrProcPath() Return. bRet: 1.
20/07/2018 08:45:00    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
20/07/2018 08:45:00    -	ShouldInjectCredentialsToSSOn() 
20/07/2018 08:45:00    -	SSOn_PackCredentials() Type is '1'
20/07/2018 08:45:00    -	SSOn_PackCredentials() Success = 1
20/07/2018 08:45:00    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
20/07/2018 08:45:00    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
20/07/2018 08:45:00    -	LaunchSsonUsingCom() Return: bRet: 1.
20/07/2018 08:45:00    -	CaptureLogonInfo() Wait for ssonsvr sync up.
20/07/2018 08:45:00    -	CaptureLogonInfo() After wait for ssonsvr sync up.
20/07/2018 08:45:00    -	CaptureLogonInfo() Return. bRet: 1.
25/07/2018 06:57:00    -	NPLogonNotify() 
25/07/2018 06:57:00    -	NPLogonNotify() Got the logon session data.
25/07/2018 06:57:00    -	TraceLogonInfo() 
25/07/2018 06:57:00    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
25/07/2018 06:57:00    -	TraceLogonInfo() MessageType  : 0
25/07/2018 06:57:00    -	TraceLogonInfo() UserName     : Dude
25/07/2018 06:57:00    -	TraceLogonInfo() Domain       : Knowhere
25/07/2018 06:57:00    -	TraceLogonInfo() Password     : Is Present
25/07/2018 06:57:00    -	TraceLogonInfo() Station Name : Winsta0
25/07/2018 06:57:00    -	TraceLogonInfo() LUID         : 0,42652608
25/07/2018 06:57:00    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
25/07/2018 06:57:00    -	GetNpProcPath() 
25/07/2018 06:57:00    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
25/07/2018 06:57:00    -	GetSSonSvrProcPath() 
25/07/2018 06:57:00    -	GetSSonSvrProcPath() Return. bRet: 1.
25/07/2018 06:57:00    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
25/07/2018 06:57:00    -	ShouldInjectCredentialsToSSOn() 
25/07/2018 06:57:00    -	SSOn_PackCredentials() Type is '1'
25/07/2018 06:57:00    -	SSOn_PackCredentials() Success = 1
25/07/2018 06:57:00    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
25/07/2018 06:57:00    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
25/07/2018 06:57:00    -	LaunchSsonUsingCom() Return: bRet: 1.
25/07/2018 06:57:00    -	CaptureLogonInfo() Wait for ssonsvr sync up.
25/07/2018 06:57:00    -	CaptureLogonInfo() After wait for ssonsvr sync up.
25/07/2018 06:57:00    -	CaptureLogonInfo() Return. bRet: 1.
26/07/2018 07:02:51    -	NPLogonNotify() 
26/07/2018 07:02:51    -	NPLogonNotify() Got the logon session data.
26/07/2018 07:02:51    -	TraceLogonInfo() 
26/07/2018 07:02:51    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
26/07/2018 07:02:51    -	TraceLogonInfo() MessageType  : 0
26/07/2018 07:02:51    -	TraceLogonInfo() UserName     : Dude
26/07/2018 07:02:51    -	TraceLogonInfo() Domain       : Knowhere
26/07/2018 07:02:51    -	TraceLogonInfo() Password     : Is Present
26/07/2018 07:02:51    -	TraceLogonInfo() Station Name : Winsta0
26/07/2018 07:02:51    -	TraceLogonInfo() LUID         : 0,106886329
26/07/2018 07:02:51    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
26/07/2018 07:02:51    -	GetNpProcPath() 
26/07/2018 07:02:51    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
26/07/2018 07:02:51    -	GetSSonSvrProcPath() 
26/07/2018 07:02:51    -	GetSSonSvrProcPath() Return. bRet: 1.
26/07/2018 07:02:51    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
26/07/2018 07:02:51    -	ShouldInjectCredentialsToSSOn() 
26/07/2018 07:02:51    -	SSOn_PackCredentials() Type is '1'
26/07/2018 07:02:51    -	SSOn_PackCredentials() Success = 1
26/07/2018 07:02:51    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
26/07/2018 07:02:51    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
26/07/2018 07:02:51    -	LaunchSsonUsingCom() Return: bRet: 1.
26/07/2018 07:02:51    -	CaptureLogonInfo() Wait for ssonsvr sync up.
26/07/2018 07:02:51    -	CaptureLogonInfo() After wait for ssonsvr sync up.
26/07/2018 07:02:51    -	CaptureLogonInfo() Return. bRet: 1.
27/07/2018 06:59:22    -	NPLogonNotify() 
27/07/2018 06:59:22    -	NPLogonNotify() Got the logon session data.
27/07/2018 06:59:22    -	TraceLogonInfo() 
27/07/2018 06:59:22    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
27/07/2018 06:59:22    -	TraceLogonInfo() MessageType  : 0
27/07/2018 06:59:22    -	TraceLogonInfo() UserName     : Dude
27/07/2018 06:59:22    -	TraceLogonInfo() Domain       : Knowhere
27/07/2018 06:59:22    -	TraceLogonInfo() Password     : Is Present
27/07/2018 06:59:22    -	TraceLogonInfo() Station Name : Winsta0
27/07/2018 06:59:22    -	TraceLogonInfo() LUID         : 0,180126202
27/07/2018 06:59:22    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
27/07/2018 06:59:22    -	GetNpProcPath() 
27/07/2018 06:59:22    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
27/07/2018 06:59:22    -	GetSSonSvrProcPath() 
27/07/2018 06:59:22    -	GetSSonSvrProcPath() Return. bRet: 1.
27/07/2018 06:59:22    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
27/07/2018 06:59:22    -	ShouldInjectCredentialsToSSOn() 
27/07/2018 06:59:22    -	SSOn_PackCredentials() Type is '1'
27/07/2018 06:59:22    -	SSOn_PackCredentials() Success = 1
27/07/2018 06:59:22    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
27/07/2018 06:59:22    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
27/07/2018 06:59:22    -	LaunchSsonUsingCom() Return: bRet: 1.
27/07/2018 06:59:22    -	CaptureLogonInfo() Wait for ssonsvr sync up.
27/07/2018 06:59:22    -	CaptureLogonInfo() After wait for ssonsvr sync up.
27/07/2018 06:59:22    -	CaptureLogonInfo() Return. bRet: 1.
30/07/2018 07:12:47    -	NPLogonNotify() 
30/07/2018 07:12:48    -	NPLogonNotify() Got the logon session data.
30/07/2018 07:12:48    -	TraceLogonInfo() 
30/07/2018 07:12:48    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
30/07/2018 07:12:48    -	TraceLogonInfo() MessageType  : 0
30/07/2018 07:12:48    -	TraceLogonInfo() UserName     : Dude
30/07/2018 07:12:48    -	TraceLogonInfo() Domain       : Knowhere
30/07/2018 07:12:48    -	TraceLogonInfo() Password     : Is Present
30/07/2018 07:12:48    -	TraceLogonInfo() Station Name : Winsta0
30/07/2018 07:12:48    -	TraceLogonInfo() LUID         : 0,228033032
30/07/2018 07:12:48    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
30/07/2018 07:12:48    -	GetNpProcPath() 
30/07/2018 07:12:48    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
30/07/2018 07:12:48    -	GetSSonSvrProcPath() 
30/07/2018 07:12:48    -	GetSSonSvrProcPath() Return. bRet: 1.
30/07/2018 07:12:48    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
30/07/2018 07:12:48    -	ShouldInjectCredentialsToSSOn() 
30/07/2018 07:12:48    -	SSOn_PackCredentials() Type is '1'
30/07/2018 07:12:48    -	SSOn_PackCredentials() Success = 1
30/07/2018 07:12:48    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
30/07/2018 07:12:48    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
30/07/2018 07:12:48    -	LaunchSsonUsingCom() Return: bRet: 1.
30/07/2018 07:12:48    -	CaptureLogonInfo() Wait for ssonsvr sync up.
30/07/2018 07:12:48    -	CaptureLogonInfo() After wait for ssonsvr sync up.
30/07/2018 07:12:48    -	CaptureLogonInfo() Return. bRet: 1.
30/07/2018 15:32:29    -	NPLogonNotify() 
30/07/2018 15:32:29    -	NPLogonNotify() Got the logon session data.
30/07/2018 15:32:29    -	TraceLogonInfo() 
30/07/2018 15:32:29    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
30/07/2018 15:32:29    -	TraceLogonInfo() MessageType  : 0
30/07/2018 15:32:29    -	TraceLogonInfo() UserName     : Dude
30/07/2018 15:32:29    -	TraceLogonInfo() Domain       : Knowhere
30/07/2018 15:32:29    -	TraceLogonInfo() Password     : Is Present
30/07/2018 15:32:29    -	TraceLogonInfo() Station Name : Winsta0
30/07/2018 15:32:29    -	TraceLogonInfo() LUID         : 0,275908777
30/07/2018 15:32:29    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
30/07/2018 15:32:29    -	GetNpProcPath() 
30/07/2018 15:32:29    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
30/07/2018 15:32:29    -	GetSSonSvrProcPath() 
30/07/2018 15:32:29    -	GetSSonSvrProcPath() Return. bRet: 1.
30/07/2018 15:32:29    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
30/07/2018 15:32:29    -	ShouldInjectCredentialsToSSOn() 
30/07/2018 15:32:29    -	SSOn_PackCredentials() Type is '1'
30/07/2018 15:32:29    -	SSOn_PackCredentials() Success = 1
30/07/2018 15:32:29    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
30/07/2018 15:32:29    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
30/07/2018 15:32:29    -	LaunchSsonUsingCom() Return: bRet: 1.
30/07/2018 15:32:29    -	CaptureLogonInfo() Wait for ssonsvr sync up.
30/07/2018 15:32:29    -	CaptureLogonInfo() After wait for ssonsvr sync up.
30/07/2018 15:32:29    -	CaptureLogonInfo() Return. bRet: 1.
31/07/2018 07:10:56    -	NPLogonNotify() 
31/07/2018 07:10:56    -	NPLogonNotify() Got the logon session data.
31/07/2018 07:10:56    -	TraceLogonInfo() 
31/07/2018 07:10:56    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
31/07/2018 07:10:56    -	TraceLogonInfo() MessageType  : 0
31/07/2018 07:10:56    -	TraceLogonInfo() UserName     : Dude
31/07/2018 07:10:56    -	TraceLogonInfo() Domain       : Knowhere
31/07/2018 07:10:56    -	TraceLogonInfo() Password     : Is Present
31/07/2018 07:10:56    -	TraceLogonInfo() Station Name : Winsta0
31/07/2018 07:10:56    -	TraceLogonInfo() LUID         : 0,282913192
31/07/2018 07:10:56    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
31/07/2018 07:10:56    -	GetNpProcPath() 
31/07/2018 07:10:56    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
31/07/2018 07:10:56    -	GetSSonSvrProcPath() 
31/07/2018 07:10:56    -	GetSSonSvrProcPath() Return. bRet: 1.
31/07/2018 07:10:56    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
31/07/2018 07:10:56    -	ShouldInjectCredentialsToSSOn() 
31/07/2018 07:10:56    -	SSOn_PackCredentials() Type is '1'
31/07/2018 07:10:56    -	SSOn_PackCredentials() Success = 1
31/07/2018 07:10:56    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
31/07/2018 07:10:56    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
31/07/2018 07:10:56    -	LaunchSsonUsingCom() Return: bRet: 1.
31/07/2018 07:10:56    -	CaptureLogonInfo() Wait for ssonsvr sync up.
31/07/2018 07:10:56    -	CaptureLogonInfo() After wait for ssonsvr sync up.
31/07/2018 07:10:56    -	CaptureLogonInfo() Return. bRet: 1.
01/08/2018 06:58:18    -	NPLogonNotify() 
01/08/2018 06:58:18    -	NPLogonNotify() Got the logon session data.
01/08/2018 06:58:18    -	TraceLogonInfo() 
01/08/2018 06:58:18    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
01/08/2018 06:58:18    -	TraceLogonInfo() MessageType  : 0
01/08/2018 06:58:18    -	TraceLogonInfo() UserName     : Dude
01/08/2018 06:58:18    -	TraceLogonInfo() Domain       : Knowhere
01/08/2018 06:58:18    -	TraceLogonInfo() Password     : Is Present
01/08/2018 06:58:18    -	TraceLogonInfo() Station Name : Winsta0
01/08/2018 06:58:18    -	TraceLogonInfo() LUID         : 0,344772803
01/08/2018 06:58:18    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
01/08/2018 06:58:18    -	GetNpProcPath() 
01/08/2018 06:58:18    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
01/08/2018 06:58:18    -	GetSSonSvrProcPath() 
01/08/2018 06:58:18    -	GetSSonSvrProcPath() Return. bRet: 1.
01/08/2018 06:58:18    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
01/08/2018 06:58:18    -	ShouldInjectCredentialsToSSOn() 
01/08/2018 06:58:18    -	SSOn_PackCredentials() Type is '1'
01/08/2018 06:58:18    -	SSOn_PackCredentials() Success = 1
01/08/2018 06:58:18    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
01/08/2018 06:58:18    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
01/08/2018 06:58:18    -	LaunchSsonUsingCom() Return: bRet: 1.
01/08/2018 06:58:18    -	CaptureLogonInfo() Wait for ssonsvr sync up.
01/08/2018 06:58:18    -	CaptureLogonInfo() After wait for ssonsvr sync up.
01/08/2018 06:58:18    -	CaptureLogonInfo() Return. bRet: 1.
02/08/2018 07:00:51    -	NPLogonNotify() 
02/08/2018 07:00:51    -	NPLogonNotify() Got the logon session data.
02/08/2018 07:00:51    -	TraceLogonInfo() 
02/08/2018 07:00:51    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
02/08/2018 07:00:51    -	TraceLogonInfo() MessageType  : 0
02/08/2018 07:00:51    -	TraceLogonInfo() UserName     : Dude
02/08/2018 07:00:51    -	TraceLogonInfo() Domain       : Knowhere
02/08/2018 07:00:51    -	TraceLogonInfo() Password     : Is Present
02/08/2018 07:00:51    -	TraceLogonInfo() Station Name : Winsta0
02/08/2018 07:00:51    -	TraceLogonInfo() LUID         : 0,414745761
02/08/2018 07:00:51    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
02/08/2018 07:00:51    -	GetNpProcPath() 
02/08/2018 07:00:51    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
02/08/2018 07:00:51    -	GetSSonSvrProcPath() 
02/08/2018 07:00:51    -	GetSSonSvrProcPath() Return. bRet: 1.
02/08/2018 07:00:51    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
02/08/2018 07:00:51    -	ShouldInjectCredentialsToSSOn() 
02/08/2018 07:00:51    -	SSOn_PackCredentials() Type is '1'
02/08/2018 07:00:51    -	SSOn_PackCredentials() Success = 1
02/08/2018 07:00:51    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
02/08/2018 07:00:51    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
02/08/2018 07:00:51    -	LaunchSsonUsingCom() Return: bRet: 1.
02/08/2018 07:00:51    -	CaptureLogonInfo() Wait for ssonsvr sync up.
02/08/2018 07:00:51    -	CaptureLogonInfo() After wait for ssonsvr sync up.
02/08/2018 07:00:51    -	CaptureLogonInfo() Return. bRet: 1.
03/08/2018 06:52:20    -	NPLogonNotify() 
03/08/2018 06:52:20    -	NPLogonNotify() Got the logon session data.
03/08/2018 06:52:20    -	TraceLogonInfo() 
03/08/2018 06:52:20    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
03/08/2018 06:52:20    -	TraceLogonInfo() MessageType  : 0
03/08/2018 06:52:20    -	TraceLogonInfo() UserName     : Dude
03/08/2018 06:52:20    -	TraceLogonInfo() Domain       : Knowhere
03/08/2018 06:52:20    -	TraceLogonInfo() Password     : Is Present
03/08/2018 06:52:20    -	TraceLogonInfo() Station Name : Winsta0
03/08/2018 06:52:20    -	TraceLogonInfo() LUID         : 0,494404775
03/08/2018 06:52:20    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
03/08/2018 06:52:20    -	GetNpProcPath() 
03/08/2018 06:52:20    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
03/08/2018 06:52:20    -	GetSSonSvrProcPath() 
03/08/2018 06:52:20    -	GetSSonSvrProcPath() Return. bRet: 1.
03/08/2018 06:52:20    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
03/08/2018 06:52:20    -	ShouldInjectCredentialsToSSOn() 
03/08/2018 06:52:20    -	SSOn_PackCredentials() Type is '1'
03/08/2018 06:52:20    -	SSOn_PackCredentials() Success = 1
03/08/2018 06:52:20    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
03/08/2018 06:52:21    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
03/08/2018 06:52:21    -	LaunchSsonUsingCom() Return: bRet: 1.
03/08/2018 06:52:21    -	CaptureLogonInfo() Wait for ssonsvr sync up.
03/08/2018 06:52:21    -	CaptureLogonInfo() After wait for ssonsvr sync up.
03/08/2018 06:52:21    -	CaptureLogonInfo() Return. bRet: 1.
06/08/2018 06:59:29    -	NPLogonNotify() 
06/08/2018 06:59:29    -	NPLogonNotify() Got the logon session data.
06/08/2018 06:59:29    -	TraceLogonInfo() 
06/08/2018 06:59:29    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
06/08/2018 06:59:29    -	TraceLogonInfo() MessageType  : 0
06/08/2018 06:59:29    -	TraceLogonInfo() UserName     : Dude
06/08/2018 06:59:29    -	TraceLogonInfo() Domain       : Knowhere
06/08/2018 06:59:29    -	TraceLogonInfo() Password     : Is Present
06/08/2018 06:59:29    -	TraceLogonInfo() Station Name : Winsta0
06/08/2018 06:59:29    -	TraceLogonInfo() LUID         : 0,546414159
06/08/2018 06:59:29    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
06/08/2018 06:59:29    -	GetNpProcPath() 
06/08/2018 06:59:29    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
06/08/2018 06:59:29    -	GetSSonSvrProcPath() 
06/08/2018 06:59:29    -	GetSSonSvrProcPath() Return. bRet: 1.
06/08/2018 06:59:29    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
06/08/2018 06:59:29    -	ShouldInjectCredentialsToSSOn() 
06/08/2018 06:59:29    -	SSOn_PackCredentials() Type is '1'
06/08/2018 06:59:29    -	SSOn_PackCredentials() Success = 1
06/08/2018 06:59:29    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
06/08/2018 06:59:29    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
06/08/2018 06:59:29    -	LaunchSsonUsingCom() Return: bRet: 1.
06/08/2018 06:59:29    -	CaptureLogonInfo() Wait for ssonsvr sync up.
06/08/2018 06:59:29    -	CaptureLogonInfo() After wait for ssonsvr sync up.
06/08/2018 06:59:29    -	CaptureLogonInfo() Return. bRet: 1.
07/08/2018 07:00:35    -	NPLogonNotify() 
07/08/2018 07:00:35    -	NPLogonNotify() Got the logon session data.
07/08/2018 07:00:35    -	TraceLogonInfo() 
07/08/2018 07:00:35    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
07/08/2018 07:00:35    -	TraceLogonInfo() MessageType  : 0
07/08/2018 07:00:35    -	TraceLogonInfo() UserName     : Dude
07/08/2018 07:00:35    -	TraceLogonInfo() Domain       : Knowhere
07/08/2018 07:00:35    -	TraceLogonInfo() Password     : Is Present
07/08/2018 07:00:35    -	TraceLogonInfo() Station Name : Winsta0
07/08/2018 07:00:35    -	TraceLogonInfo() LUID         : 0,620322026
07/08/2018 07:00:35    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
07/08/2018 07:00:35    -	GetNpProcPath() 
07/08/2018 07:00:35    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
07/08/2018 07:00:35    -	GetSSonSvrProcPath() 
07/08/2018 07:00:35    -	GetSSonSvrProcPath() Return. bRet: 1.
07/08/2018 07:00:35    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
07/08/2018 07:00:35    -	ShouldInjectCredentialsToSSOn() 
07/08/2018 07:00:35    -	SSOn_PackCredentials() Type is '1'
07/08/2018 07:00:35    -	SSOn_PackCredentials() Success = 1
07/08/2018 07:00:35    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
07/08/2018 07:00:35    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
07/08/2018 07:00:36    -	LaunchSsonUsingCom() Return: bRet: 1.
07/08/2018 07:00:36    -	CaptureLogonInfo() Wait for ssonsvr sync up.
07/08/2018 07:00:36    -	CaptureLogonInfo() After wait for ssonsvr sync up.
07/08/2018 07:00:36    -	CaptureLogonInfo() Return. bRet: 1.
08/08/2018 06:59:25    -	NPLogonNotify() 
08/08/2018 06:59:25    -	NPLogonNotify() Got the logon session data.
08/08/2018 06:59:25    -	TraceLogonInfo() 
08/08/2018 06:59:25    -	TraceLogonInfo() NPLogonNotify: LOGON INFO
08/08/2018 06:59:25    -	TraceLogonInfo() MessageType  : 0
08/08/2018 06:59:25    -	TraceLogonInfo() UserName     : Dude
08/08/2018 06:59:25    -	TraceLogonInfo() Domain       : Knowhere
08/08/2018 06:59:25    -	TraceLogonInfo() Password     : Is Present
08/08/2018 06:59:25    -	TraceLogonInfo() Station Name : Winsta0
08/08/2018 06:59:25    -	TraceLogonInfo() LUID         : 0,699532671
08/08/2018 06:59:25    -	CaptureLogonInfo() Entry: isSmartCardCredential: 0.
08/08/2018 06:59:25    -	GetNpProcPath() 
08/08/2018 06:59:25    -	GetNpProcPath() Return. Output path: C:\Program Files (x86)\Citrix\ICA Client\x64\.
08/08/2018 06:59:25    -	GetSSonSvrProcPath() 
08/08/2018 06:59:25    -	GetSSonSvrProcPath() Return. bRet: 1.
08/08/2018 06:59:25    -	CaptureLogonInfo() pPath: C:\Program Files (x86)\Citrix\ICA Client\.
08/08/2018 06:59:25    -	ShouldInjectCredentialsToSSOn() 
08/08/2018 06:59:25    -	SSOn_PackCredentials() Type is '1'
08/08/2018 06:59:25    -	SSOn_PackCredentials() Success = 1
08/08/2018 06:59:25    -	LaunchSsonUsingCom() Entry: pPath: C:\Program Files (x86)\Citrix\ICA Client\. pDesktopName: Winsta0\Default.
08/08/2018 06:59:26    -	LaunchSsonUsingCom() Got gHtcForSsonCom.
08/08/2018 06:59:26    -	LaunchSsonUsingCom() Return: bRet: 1.
08/08/2018 06:59:26    -	CaptureLogonInfo() Wait for ssonsvr sync up.
08/08/2018 06:59:26    -	CaptureLogonInfo() After wait for ssonsvr sync up.
08/08/2018 06:59:26    -	CaptureLogonInfo() Return. bRet: 1.

 

 

Link to comment
  • 0

Hi,

We were able to reproduce same issue only when either client and server are in different domain or the system credentials are not accepted by server.
If this is not case with your setup then we might need to analyze your system configurations.

Will it be possible for you to have a GTM today around 2:00 pm IST.

 

Thanks & Regards

Puneet 

Link to comment
  • 0

Hi Puneet, 

 

thx for the offer! I'm sorry I have to tell you, that we work only till 1:00pm on fridays. But as i mentioned, client and server are on the same domain. I recently turned off the http-basic auth gpo to test it again, because I saw, that the allow pass through for all ICA connections wasn't set. It was the only thing I found that was missing. Everything else should be proper configured. But still the same issue, prompting for password.

 

If you have next week some time, I really would appreciate it! :)

Link to comment
  • 0

Dear all. We finally fixed it in our 7.15LTSR CU5 environment  through Citrix support the following way:

 

-Go to your StoreFront MMC

-Select your Store and click on "Manage Receiver for Web Sites" to the right

-Click on your  Store URL and select "Configure"

-Select Authentication Methods and  check the  "Domain pass-through" box

 

That's it. The solution is undocumented so no reference on any article which is why we asked to Citrix to include it on the official documentation.

Hope it works for you as well  we lost a lot of time with the issue but fortunately managed to solve it.

Good luck!

 

 

 

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...