Hi @Matt_Wrock - Yeah here's all the non-SUCCESS results for Paths that contain 7z.exe:
"9:23:35.1481031 AM","rundll32.exe","4128","CreateFile","C:\Windows\assembly\GAC_MSIL\Microsoft.Deployment.WindowsInstaller\3.0.0.0__ce35f76fcda82bad\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2014530 AM","rundll32.exe","4128","CreateFile","C:\Windows\SysWOW64\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2018040 AM","rundll32.exe","4128","CreateFile","C:\Windows\assembly\GAC_MSIL\Microsoft.Deployment.WindowsInstaller\3.0.0.0__ce35f76fcda82bad\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2021111 AM","rundll32.exe","4128","CreateFile","C:\Windows\SysWOW64\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2030607 AM","rundll32.exe","4128","CreateFile","C:\Windows\System\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2236703 AM","rundll32.exe","4128","CreateFile","C:\Windows\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2239755 AM","rundll32.exe","4128","CreateFile","C:\Windows\SysWOW64\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2242643 AM","rundll32.exe","4128","CreateFile","C:\Windows\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2245567 AM","rundll32.exe","4128","CreateFile","C:\Windows\SysWOW64\wbem\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2257795 AM","rundll32.exe","4128","CreateFile","C:\Windows\SysWOW64\WindowsPowerShell\v1.0\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2259564 AM","rundll32.exe","4128","CreateFile","C:\Windows\SysWOW64\OpenSSH\7z.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2262866 AM","rundll32.exe","4128","CreateFile","C:\Program Files\Microsoft SQL Server\110\Tools\Binn\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2266640 AM","rundll32.exe","4128","CreateFile","C:\Program Files\Amazon\AWSCLI\7z.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:23:35.2268216 AM","rundll32.exe","4128","CreateFile","C:\Users\allanbdevprd\Desktop\opscode\chef\bin\7z.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"