Capturing components of an application using a static post-installation analysis of the system

A computing device, comprising:

• at least one processor;
• and
• memory including instructions that, when executed by the at least one processor, cause the computing device to:
• inspect an installation database on an endpoint computing device to determine a set of basic components of an application installed on the endpoint computing device, the set of basic components including one or more binary executable files;
• parse the one or more binary executable files to identify character strings that indicate a file system path, a registry path, a file name or an imported module;
• capture one or more additional components identified by the character strings parsed from the one or more binary executable files;
• and
• create an application package comprised of the set of basic components and the additional components, wherein the application package is managed from a remote location.

A non-transitory computer readable storage medium comprising one or more sequences of instructions, the instructions when executed by one or more processors causing the one or more processors to execute the operations of:

• inspecting an installation database on an endpoint computing device to determine a set of basic components of an application installed on the endpoint computing device, the set of basic components including one or more binary executable files;
• parsing the one or more binary executable files to identify character strings that indicate a file system path, a registry path, a file name or an imported module;
• capturing one or more additional components identified by the character strings parsed from the one or more binary executable files;
• and
• creating an application package comprised of the set of basic components and the additional components, wherein the application package is managed from a remote location.