Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 528 | neutron-ovs-agent | | Application | | | hv-cinder-73362 | | 12/2/2020 5:47:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 527 | cinder-backup | | Application | | | hv-cinder-73362 | | 12/2/2020 5:47:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 526 | cinder-volume | | Application | | | hv-cinder-73362 | | 12/2/2020 5:47:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 525 | nova-compute | | Application | | | hv-cinder-73362 | | 12/2/2020 5:47:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 524 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:37:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-03T17:36:02Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 523 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:37:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 522 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:36:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 521 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:36:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 520 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:36:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 519 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:36:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 518 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:36:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 517 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4328 | 4956 | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:36:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12d50a1f
Analysis symbol:
Rechecking for solution: 0
Report Id: 5199f8f1-3286-4a1b-be28-6150a613d6e6
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 516 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1338f88b
Analysis symbol:
Rechecking for solution: 0
Report Id: d79f332b-1d17-494e-836e-ee661522840b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 515 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x900
Faulting application start time: 0x01d6c8d004b895fb
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d79f332b-1d17-494e-836e-ee661522840b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 514 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1080f791
Analysis symbol:
Rechecking for solution: 0
Report Id: 30e2edbb-e47c-41d8-a215-3ce6ae58279b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 513 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1130
Faulting application start time: 0x01d6c8d00491d476
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 30e2edbb-e47c-41d8-a215-3ce6ae58279b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 512 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0b30f697
Analysis symbol:
Rechecking for solution: 0
Report Id: a2063126-c1a0-435e-9cf8-64ff4ce8ee2f
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 511 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xf28
Faulting application start time: 0x01d6c8d0046c4084
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a2063126-c1a0-435e-9cf8-64ff4ce8ee2f
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 510 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13c0f59d
Analysis symbol:
Rechecking for solution: 0
Report Id: 6c34c971-7ecc-4f3a-b64a-a0ef5dd3c31e
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 509 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1364
Faulting application start time: 0x01d6c8d0044517ca
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 6c34c971-7ecc-4f3a-b64a-a0ef5dd3c31e
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 508 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11bcf4a3
Analysis symbol:
Rechecking for solution: 0
Report Id: 0a6ed233-773e-49a2-9c7b-5725ccc48e5f
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 507 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xb1c
Faulting application start time: 0x01d6c8d0041fde98
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 0a6ed233-773e-49a2-9c7b-5725ccc48e5f
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 506 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0cfcf3a9
Analysis symbol:
Rechecking for solution: 0
Report Id: b9ea43a0-6411-4780-b6dd-c14c23f08c85
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 505 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd10
Faulting application start time: 0x01d6c8d0027aabef
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: b9ea43a0-6411-4780-b6dd-c14c23f08c85
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 504 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_08f8e8ac
Analysis symbol:
Rechecking for solution: 0
Report Id: e1e65a68-7afe-4431-82a7-eaf53d5684d5
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 503 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd8
Faulting application start time: 0x01d6c8d0024e340e
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: e1e65a68-7afe-4431-82a7-eaf53d5684d5
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 502 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1118e7c2
Analysis symbol:
Rechecking for solution: 0
Report Id: ec270632-6daa-4db3-9510-6e3460ac7bad
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 501 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd50
Faulting application start time: 0x01d6c8d002295d44
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ec270632-6daa-4db3-9510-6e3460ac7bad
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 500 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11dce6d7
Analysis symbol:
Rechecking for solution: 0
Report Id: 0b9d2651-0369-411a-8667-e29c05e9f0d0
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 499 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x12a4
Faulting application start time: 0x01d6c8d00203ecc3
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 0b9d2651-0369-411a-8667-e29c05e9f0d0
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 498 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1040e5ce
Analysis symbol:
Rechecking for solution: 0
Report Id: da49d8f9-02bf-4e94-969c-b044cb87c4c5
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 497 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd48
Faulting application start time: 0x01d6c8d001dd6256
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: da49d8f9-02bf-4e94-969c-b044cb87c4c5
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 496 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0880e4c4
Analysis symbol:
Rechecking for solution: 0
Report Id: 4f635020-fed2-48f2-84c3-21820ab583ad
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 495 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x10c4
Faulting application start time: 0x01d6c8d001b6c583
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 4f635020-fed2-48f2-84c3-21820ab583ad
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 494 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0ad8e3bb
Analysis symbol:
Rechecking for solution: 0
Report Id: e92330c0-4ffe-4997-9bd6-46639aebf19d
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 493 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd0c
Faulting application start time: 0x01d6c8d00190a496
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: e92330c0-4ffe-4997-9bd6-46639aebf19d
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 492 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_02a4e2ef
Analysis symbol:
Rechecking for solution: 0
Report Id: 328f3458-98b8-417b-b675-fba7ec82261d
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 491 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xef8
Faulting application start time: 0x01d6c8d0016dc9b1
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 328f3458-98b8-417b-b675-fba7ec82261d
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 490 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_116ce215
Analysis symbol:
Rechecking for solution: 0
Report Id: b5014524-a35b-4bd9-a605-446528752b69
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 489 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x60
Faulting application start time: 0x01d6c8d0014a7d1a
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: b5014524-a35b-4bd9-a605-446528752b69
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 488 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0c00e0ec
Analysis symbol:
Rechecking for solution: 0
Report Id: 2b198d2d-c849-4cf5-910f-6fa9a78d5905
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 487 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xefc
Faulting application start time: 0x01d6c8d00120cfaf
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 2b198d2d-c849-4cf5-910f-6fa9a78d5905
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 486 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_080ce011
Analysis symbol:
Rechecking for solution: 0
Report Id: df69d8f0-c337-49e9-bf24-14ade282c25a
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 485 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x214
Faulting application start time: 0x01d6c8d000fd238b
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: df69d8f0-c337-49e9-bf24-14ade282c25a
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 484 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0e50df07
Analysis symbol:
Rechecking for solution: 0
Report Id: 7515ba3c-a711-42b2-944a-b4db6d5646ab
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 483 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13b8
Faulting application start time: 0x01d6c8d000d6df2e
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7515ba3c-a711-42b2-944a-b4db6d5646ab
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 482 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1354de1d
Analysis symbol:
Rechecking for solution: 0
Report Id: cca65ed6-9ae4-4500-9554-2240f0a2eb0c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 481 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x108c
Faulting application start time: 0x01d6c8d000b07447
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: cca65ed6-9ae4-4500-9554-2240f0a2eb0c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 480 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1060dd33
Analysis symbol:
Rechecking for solution: 0
Report Id: ff939291-a31e-424c-91b6-d270d0c14ac0
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 479 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1290
Faulting application start time: 0x01d6c8d0008ca960
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ff939291-a31e-424c-91b6-d270d0c14ac0
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 478 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12f0dc48
Analysis symbol:
Rechecking for solution: 0
Report Id: d5550163-8e3d-49f8-b1d3-168b1081465b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 477 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x8c
Faulting application start time: 0x01d6c8d000687f18
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d5550163-8e3d-49f8-b1d3-168b1081465b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 476 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0e58db3f
Analysis symbol:
Rechecking for solution: 0
Report Id: 88f0fcf1-c5bb-4ad1-b879-c0db58ece56c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 475 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd4c
Faulting application start time: 0x01d6c8d000419aee
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 88f0fcf1-c5bb-4ad1-b879-c0db58ece56c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 474 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11f0da35
Analysis symbol:
Rechecking for solution: 0
Report Id: 895388a6-6c82-4c63-b32b-8f9e7e211bcb
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 473 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x38c
Faulting application start time: 0x01d6c8d00017e3f1
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 895388a6-6c82-4c63-b32b-8f9e7e211bcb
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 472 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13d0d8ed
Analysis symbol:
Rechecking for solution: 0
Report Id: 40e2770e-eb95-40ae-ae36-79b3a7c31340
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 471 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x57c
Faulting application start time: 0x01d6c8cfffe63e82
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 40e2770e-eb95-40ae-ae36-79b3a7c31340
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 470 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0978d803
Analysis symbol:
Rechecking for solution: 0
Report Id: edaddc4f-a39d-4848-a67f-45bddd7cff35
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 469 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xcec
Faulting application start time: 0x01d6c8cfffc0fa10
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: edaddc4f-a39d-4848-a67f-45bddd7cff35
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 468 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11f8d709
Analysis symbol:
Rechecking for solution: 0
Report Id: 429054ab-056b-435a-a763-08ee70641838
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 467 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1310
Faulting application start time: 0x01d6c8cfff9bd484
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 429054ab-056b-435a-a763-08ee70641838
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 466 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0964d5ff
Analysis symbol:
Rechecking for solution: 0
Report Id: cb1c1778-349e-4151-b490-d53c9a0390b3
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 465 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x11f0
Faulting application start time: 0x01d6c8cfff767913
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: cb1c1778-349e-4151-b490-d53c9a0390b3
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 464 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_01e0d515
Analysis symbol:
Rechecking for solution: 0
Report Id: 1b833c4d-5a96-417f-b69f-dec43fb65ac0
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 463 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd3c
Faulting application start time: 0x01d6c8cfff508b34
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 1b833c4d-5a96-417f-b69f-dec43fb65ac0
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 462 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1234d41b
Analysis symbol:
Rechecking for solution: 0
Report Id: fdd09bdc-5311-4240-9018-30515cfebcb1
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 461 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x7b4
Faulting application start time: 0x01d6c8cfff282e87
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: fdd09bdc-5311-4240-9018-30515cfebcb1
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 460 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11e4d321
Analysis symbol:
Rechecking for solution: 0
Report Id: e98d5b4c-4c86-451e-a670-723a162f2923
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 459 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1234
Faulting application start time: 0x01d6c8cfff0542b2
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: e98d5b4c-4c86-451e-a670-723a162f2923
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 458 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0844d246
Analysis symbol:
Rechecking for solution: 0
Report Id: c2d34c68-3d6b-446f-a43b-68c360cb7d95
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 457 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1268
Faulting application start time: 0x01d6c8cffee2faad
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: c2d34c68-3d6b-446f-a43b-68c360cb7d95
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 456 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?02T17:24:23.892516300Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 455 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 5112 | 4440 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10d4d14c
Analysis symbol:
Rechecking for solution: 0
Report Id: f9e2a063-6c4a-41ac-9cbf-ec0da03b2919
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 454 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1198
Faulting application start time: 0x01d6c8cffebb6199
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: f9e2a063-6c4a-41ac-9cbf-ec0da03b2919
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 453 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1178d052
Analysis symbol:
Rechecking for solution: 0
Report Id: 417c877a-fb3d-450d-a7e9-47e2e9d31249
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 452 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1194
Faulting application start time: 0x01d6c8cffe9426fc
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 417c877a-fb3d-450d-a7e9-47e2e9d31249
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 451 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1110cf58
Analysis symbol:
Rechecking for solution: 0
Report Id: 86ca3a81-ea6b-473c-b0a5-2e2d44e822f9
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 450 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xbb4
Faulting application start time: 0x01d6c8cffe6c7b37
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 86ca3a81-ea6b-473c-b0a5-2e2d44e822f9
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 449 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1144ce4e
Analysis symbol:
Rechecking for solution: 0
Report Id: 5199f8f1-3286-4a1b-be28-6150a613d6e6
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 448 | Windows Error Reporting | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 3184. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 447 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Cloudbase Open vSwitch™ for Windows®. Product Version: 2.12.1. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 446 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Cloudbase Open vSwitch™ for Windows® -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 445 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xb10
Faulting application start time: 0x01d6c8cffe039293
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 5199f8f1-3286-4a1b-be28-6150a613d6e6
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 444 | Application Error | | Application | | | hv-cinder-73362 | | 12/2/2020 5:24:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?02T17:24:23.892516300Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 443 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 5112 | 1328 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:24:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 3184. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 442 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:24:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <3679CA35668772304D30A5FB873B0FA77BB70D54>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 441 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 1584 | hv-cinder-73362 | | 12/2/2020 5:24:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root list with effective date: ?Monday, ?October ?12, ?2020 9:49:04 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 440 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 439 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 438 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 437 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 436 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 435 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 434 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 433 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 3952 | hv-cinder-73362 | | 12/2/2020 5:14:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 432 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4948 | 4940 | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:13:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?02T17:12:55.184202000Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 431 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 2916 | 3460 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4980. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 430 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:12:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 429 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 428 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?02T17:12:55.184202000Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 427 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 2916 | 3880 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?02T17:12:54.341988600Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 426 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 2916 | 3460 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?02T17:12:54.341988600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 425 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 2916 | 4504 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4980. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 424 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4980. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 423 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:12:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 422 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 421 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4980. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 420 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 419 | MsiInstaller | | Application | | | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:12:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?02T17:12:02.247642100Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 418 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4632 | 4268 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?02T17:12:02.247642100Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 417 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4632 | 4268 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1001 | 12/2/2020 5:12:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 416 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 1812 | hv-cinder-73362 | | 12/2/2020 5:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:10:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-03T17:09:21Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:10:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/05/31:17:09:50;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 412 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 411 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 410 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 409 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 408 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 407 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 406 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=691b12ad-1d33-4853-9dde-52723bec4887 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=7ad178a7-d2d1-4e95-a840-bc632119c95f | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 394 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 393 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 392 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 1364 | hv-cinder-73362 | | 12/2/2020 5:09:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2020/12/12:17:05:33;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 391 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:09:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 390 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:08:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 389 | cloudbase-init | | Application | | | hv-cinder-73362 | | 12/2/2020 5:07:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 388 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:07:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 387 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 556 | 612 | hv-cinder-73362 | S-1-5-21-1754827030-1433306138-183850898-1000 | 12/2/2020 5:07:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service failed to create default configuration for new user 'HV-CINDER-73362\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 386 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:07:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 385 | cloudbase-init | | Application | | | hv-cinder-73362 | | 12/2/2020 5:06:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'HV-CINDER-73362\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 384 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:06:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 383 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1332 | 1760 | hv-cinder-73362 | | 12/2/2020 5:06:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 382 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 556 | 2032 | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:06:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 381 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:06:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 380 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 556 | 1200 | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:06:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 379 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:06:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 378 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 556 | 1692 | hv-cinder-73362 | S-1-5-18 | 12/2/2020 5:06:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 377 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:06:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 376 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | hv-cinder-73362 | | 12/2/2020 5:06:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 375 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 512 | 1484 | WIN-5T344G8GM1H | S-1-5-18 | 12/2/2020 5:05:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 374 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 12/2/2020 5:05:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 373 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/2/2020 5:05:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?September ?15, ?2020 5:56:35 PM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 372 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1712 | 1840 | WIN-5T344G8GM1H | | 12/2/2020 5:04:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 371 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/2/2020 5:04:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 512 | 532 | WIN-5T344G8GM1H | S-1-5-18 | 12/2/2020 5:04:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 369 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 512 | 1664 | WIN-5T344G8GM1H | S-1-5-18 | 12/2/2020 5:04:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 368 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 512 | 1484 | WIN-5T344G8GM1H | S-1-5-18 | 12/2/2020 5:04:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-U7U8F83LQ63 | | 12/2/2020 5:04:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-U7U8F83LQ63 | | 12/2/2020 5:04:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 365 | VSS | | Application | | | WIN-U7U8F83LQ63 | | 12/2/2020 5:04:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |