Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 538 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-01T04:28:44Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 537 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 536 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:29:27 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 535 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:29:26 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 534 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:29:26 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase Open vSwitch™ for Windows®. Product Version: 2.12.1. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 533 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:29:26 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 532 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 531 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 530 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 529 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 528 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:29:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 527 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:23:02 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 526 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:23:02 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 525 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:23:02 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase Open vSwitch™ for Windows®. Product Version: 2.12.1. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 524 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:23:02 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0745a8c3
Analysis symbol:
Rechecking for solution: 0
Report Id: b2eab7d3-c726-4a03-a39e-9b713715d23c
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 523 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0e65a8e3
Analysis symbol:
Rechecking for solution: 0
Report Id: 31985fdb-55b3-4951-b534-f68471adc043
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 522 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x11cc
Faulting application start time: 0x01d6c6cf31a1f7b7
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 31985fdb-55b3-4951-b534-f68471adc043
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 521 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0425a7c9
Analysis symbol:
Rechecking for solution: 0
Report Id: d7e9cdba-badc-4db7-827b-a4364ba0cfab
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 520 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0745a6ef
Analysis symbol:
Rechecking for solution: 0
Report Id: 05160818-b467-46ee-8818-11649c8d7e6e
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 519 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x904
Faulting application start time: 0x01d6c6cf317a7ee9
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d7e9cdba-badc-4db7-827b-a4364ba0cfab
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 518 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1095a6df
Analysis symbol:
Rechecking for solution: 0
Report Id: 67c37f0a-18d4-4179-ba5a-03320f7e144d
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 517 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x136c
Faulting application start time: 0x01d6c6cf31540113
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 67c37f0a-18d4-4179-ba5a-03320f7e144d
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 516 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_098da5e5
Analysis symbol:
Rechecking for solution: 0
Report Id: a32d0aff-b285-4f12-bd8f-a82456742795
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 515 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0745a558
Analysis symbol:
Rechecking for solution: 0
Report Id: 1ddbbced-f2e2-4dcd-b231-901fd446ecb7
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 514 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x133c
Faulting application start time: 0x01d6c6cf31296659
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a32d0aff-b285-4f12-bd8f-a82456742795
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 513 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:44 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_070da4db
Analysis symbol:
Rechecking for solution: 0
Report Id: 8cb59ab3-0d49-4372-8a3f-6ee10a35b6e0
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 512 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1180
Faulting application start time: 0x01d6c6cf3104bc41
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 8cb59ab3-0d49-4372-8a3f-6ee10a35b6e0
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 511 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11f5a3e1
Analysis symbol:
Rechecking for solution: 0
Report Id: fb1b96ee-4428-415f-9e0e-3c1f8d2a73a6
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 510 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13b4
Faulting application start time: 0x01d6c6cf30df99ab
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: fb1b96ee-4428-415f-9e0e-3c1f8d2a73a6
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 509 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0785a2f7
Analysis symbol:
Rechecking for solution: 0
Report Id: f542f51a-99bf-46ea-bb25-ae31b1c1e0da
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 508 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xda8
Faulting application start time: 0x01d6c6cf30bc6891
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: f542f51a-99bf-46ea-bb25-ae31b1c1e0da
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 507 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_047da20d
Analysis symbol:
Rechecking for solution: 0
Report Id: 6dcb5a2b-5778-4b44-bda3-b82736379e93
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 506 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1348
Faulting application start time: 0x01d6c6cf309891cd
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 6dcb5a2b-5778-4b44-bda3-b82736379e93
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 505 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0745a170
Analysis symbol:
Rechecking for solution: 0
Report Id: 0b72be10-ff73-45eb-9760-c9054b4180de
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 504 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:43 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0a49a113
Analysis symbol:
Rechecking for solution: 0
Report Id: 460459de-941e-49ca-bea3-a20ff1507b4f
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 503 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1188
Faulting application start time: 0x01d6c6cf30723704
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 460459de-941e-49ca-bea3-a20ff1507b4f
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 502 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0869a028
Analysis symbol:
Rechecking for solution: 0
Report Id: 8d7f7f37-66aa-4c00-a10d-9f8371d9051f
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 501 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x125c
Faulting application start time: 0x01d6c6cf30502676
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 8d7f7f37-66aa-4c00-a10d-9f8371d9051f
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 500 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_121d9f4e
Analysis symbol:
Rechecking for solution: 0
Report Id: b545e07b-8c47-4d27-80aa-fe3e5be459f2
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 499 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1244
Faulting application start time: 0x01d6c6cf302c541e
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: b545e07b-8c47-4d27-80aa-fe3e5be459f2
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 498 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_07459eb1
Analysis symbol:
Rechecking for solution: 0
Report Id: 044f2f99-bef0-4f7b-937d-a0660341603a
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 497 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10459e54
Analysis symbol:
Rechecking for solution: 0
Report Id: 06feebc4-dacc-40e3-94ca-d2f326b43b90
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 496 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1164
Faulting application start time: 0x01d6c6cf3006dc00
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 06feebc4-dacc-40e3-94ca-d2f326b43b90
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 495 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11559d69
Analysis symbol:
Rechecking for solution: 0
Report Id: a26c8a3b-bc65-43ff-b645-fac3ccd4abb4
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 494 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xc10
Faulting application start time: 0x01d6c6cf2fe40601
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a26c8a3b-bc65-43ff-b645-fac3ccd4abb4
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 493 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11059c6f
Analysis symbol:
Rechecking for solution: 0
Report Id: 20eb6c7d-50e9-4ede-af03-5a8360fcd910
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 492 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_07459c11
Analysis symbol:
Rechecking for solution: 0
Report Id: 026738ff-5fe0-42c7-bb01-c920b8bfce47
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 491 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1060
Faulting application start time: 0x01d6c6cf2fbe0c96
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 20eb6c7d-50e9-4ede-af03-5a8360fcd910
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 490 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10f99b66
Analysis symbol:
Rechecking for solution: 0
Report Id: 0a5ee13f-98a3-4982-a505-68e87cd58d8d
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 489 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1044
Faulting application start time: 0x01d6c6cf2f94c0a2
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 0a5ee13f-98a3-4982-a505-68e87cd58d8d
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 488 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11d99a8b
Analysis symbol:
Rechecking for solution: 0
Report Id: a957db18-c37d-41b0-85f0-74926e33fa1c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 487 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x590
Faulting application start time: 0x01d6c6cf2f735dd2
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a957db18-c37d-41b0-85f0-74926e33fa1c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 486 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0d9599a0
Analysis symbol:
Rechecking for solution: 0
Report Id: c1108e8d-df21-4010-be98-88138e6cca73
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 485 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xfd8
Faulting application start time: 0x01d6c6cf2f507d45
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: c1108e8d-df21-4010-be98-88138e6cca73
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 484 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0c9d98a6
Analysis symbol:
Rechecking for solution: 0
Report Id: ca719004-6f44-4c58-8761-dc43a0e013e2
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 483 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1168
Faulting application start time: 0x01d6c6cf2f2883e6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ca719004-6f44-4c58-8761-dc43a0e013e2
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 482 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_098d97ac
Analysis symbol:
Rechecking for solution: 0
Report Id: 2ac250b5-f4c3-4b8d-8c50-56d063a93013
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 481 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xf4c
Faulting application start time: 0x01d6c6cf2f005b1f
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 2ac250b5-f4c3-4b8d-8c50-56d063a93013
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 480 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_063196c2
Analysis symbol:
Rechecking for solution: 0
Report Id: 80fab1db-6fb9-4ff9-b0ea-f0faea6586e7
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 479 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x12b8
Faulting application start time: 0x01d6c6cf2edbdd69
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 80fab1db-6fb9-4ff9-b0ea-f0faea6586e7
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 478 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f7d95c8
Analysis symbol:
Rechecking for solution: 0
Report Id: 6e5c8f92-ed65-4f47-96ae-c8746039f68e
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 477 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13cc
Faulting application start time: 0x01d6c6cf2eb7de07
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 6e5c8f92-ed65-4f47-96ae-c8746039f68e
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 476 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0745949f
Analysis symbol:
Rechecking for solution: 0
Report Id: 4d244fd7-beb8-4117-995a-fd063a16ae2c
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 475 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_133594be
Analysis symbol:
Rechecking for solution: 0
Report Id: 21f35b13-8fd2-432b-a840-a6e52e4e0724
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 474 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x11f0
Faulting application start time: 0x01d6c6cf2e916c1c
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 21f35b13-8fd2-432b-a840-a6e52e4e0724
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 473 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0e9593d4
Analysis symbol:
Rechecking for solution: 0
Report Id: ae69dd91-0dfe-4656-86c7-6f70bf193eee
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 472 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x109c
Faulting application start time: 0x01d6c6cf2e6b618e
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ae69dd91-0dfe-4656-86c7-6f70bf193eee
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 471 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_132592ea
Analysis symbol:
Rechecking for solution: 0
Report Id: 1c8eff81-d3da-46cd-ac14-5b18f0141cf5
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 470 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x788
Faulting application start time: 0x01d6c6cf2e4590d2
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 1c8eff81-d3da-46cd-ac14-5b18f0141cf5
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 469 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12e991e0
Analysis symbol:
Rechecking for solution: 0
Report Id: 46b6f62a-a7d5-4d79-83fc-75ac42dab008
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 468 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13c4
Faulting application start time: 0x01d6c6cf2e212f88
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 46b6f62a-a7d5-4d79-83fc-75ac42dab008
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 467 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_09a19105
Analysis symbol:
Rechecking for solution: 0
Report Id: 5fcc1e7f-73f9-4be0-b3e9-a9bfa13ee27c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 466 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x514
Faulting application start time: 0x01d6c6cf2dfdd8af
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 5fcc1e7f-73f9-4be0-b3e9-a9bfa13ee27c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 465 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_05898ffc
Analysis symbol:
Rechecking for solution: 0
Report Id: b2eab7d3-c726-4a03-a39e-9b713715d23c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 464 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10518fdc
Analysis symbol:
Rechecking for solution: 0
Report Id: 20d09c3f-0f23-45cc-b1be-1caee5ae9101
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 463 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x864
Faulting application start time: 0x01d6c6cf2dd79919
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: b2eab7d3-c726-4a03-a39e-9b713715d23c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 462 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12fd8ee2
Analysis symbol:
Rechecking for solution: 0
Report Id: 05160818-b467-46ee-8818-11649c8d7e6e
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 461 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1238
Faulting application start time: 0x01d6c6cf2daa8399
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 05160818-b467-46ee-8818-11649c8d7e6e
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 460 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10618dd9
Analysis symbol:
Rechecking for solution: 0
Report Id: 1ddbbced-f2e2-4dcd-b231-901fd446ecb7
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 459 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x10f0
Faulting application start time: 0x01d6c6cf2d8338d7
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 1ddbbced-f2e2-4dcd-b231-901fd446ecb7
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 458 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_08e18ccf
Analysis symbol:
Rechecking for solution: 0
Report Id: 0b72be10-ff73-45eb-9760-c9054b4180de
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 457 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?11?-?30T04:13:27.529396600Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 456 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1400 | 1464 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1324
Faulting application start time: 0x01d6c6cf2d5cf0b3
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 0b72be10-ff73-45eb-9760-c9054b4180de
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 455 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10058bf4
Analysis symbol:
Rechecking for solution: 0
Report Id: 044f2f99-bef0-4f7b-937d-a0660341603a
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 454 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x9b4
Faulting application start time: 0x01d6c6cf2d374176
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 044f2f99-bef0-4f7b-937d-a0660341603a
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 453 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13bd8aeb
Analysis symbol:
Rechecking for solution: 0
Report Id: 026738ff-5fe0-42c7-bb01-c920b8bfce47
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 452 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x240
Faulting application start time: 0x01d6c6cf2d121fd8
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 026738ff-5fe0-42c7-bb01-c920b8bfce47
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 451 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12898a00
Analysis symbol:
Rechecking for solution: 0
Report Id: 4d244fd7-beb8-4117-995a-fd063a16ae2c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 450 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:37 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x964
Faulting application start time: 0x01d6c6cf2cea3049
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 4d244fd7-beb8-4117-995a-fd063a16ae2c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 449 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_137188d8
Analysis symbol:
Rechecking for solution: 0
Report Id: 20d09c3f-0f23-45cc-b1be-1caee5ae9101
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 448 | Windows Error Reporting | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 3996. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 447 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Cloudbase Open vSwitch™ for Windows®. Product Version: 2.12.1. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 446 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Cloudbase Open vSwitch™ for Windows® -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 445 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xc90
Faulting application start time: 0x01d6c6cf2c7e278c
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 20d09c3f-0f23-45cc-b1be-1caee5ae9101
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 444 | Application Error | | Application | | | n-h2-764292-3 | | 11/30/2020 4:13:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?11?-?30T04:13:27.529396600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 443 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1400 | 3184 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:13:27 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 3996. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 442 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:13:27 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <3679CA35668772304D30A5FB873B0FA77BB70D54>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 441 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 1700 | n-h2-764292-3 | | 11/30/2020 4:13:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 440 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4340 | 4344 | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:05:53 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?11?-?30T04:05:33.372775600Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 439 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4248 | 4252 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4260. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 438 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:05:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 437 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 436 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?11?-?30T04:05:33.372775600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 435 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4248 | 4208 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:33 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?11?-?30T04:05:32.592730800Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 434 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4248 | 4252 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:33 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?11?-?30T04:05:32.592730800Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 433 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4248 | 3084 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:32 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4260. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 432 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:33 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4260. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 431 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:05:33 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 430 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:33 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 429 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:33 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4260. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 428 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:05:32 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 427 | MsiInstaller | | Application | | | n-h2-764292-3 | S-1-5-18 | 11/30/2020 4:05:23 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?11?-?30T04:04:40.641100100Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 426 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4020 | 4636 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:04:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?11?-?30T04:04:40.623290600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 425 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4020 | 4636 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1001 | 11/30/2020 4:04:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 424 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 3248 | n-h2-764292-3 | | 11/30/2020 4:03:58 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 423 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:03:06 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-01T04:02:06Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 422 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:03:06 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 421 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:35 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/05/29:04:02:31;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 420 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:32 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 419 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:31 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 418 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:31 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 417 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:31 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 416 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:31 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:30 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:30 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:30 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root list with effective date: ?Monday, ?October ?12, ?2020 9:49:04 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 412 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 411 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 410 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 409 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 408 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 407 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 406 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4236 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:29 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:28 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:28 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:27 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:27 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:26 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:25 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:22 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=4ca0e3f7-0951-40fb-96e7-f792e2f9be75 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=025e5878-84ae-404c-9e6e-66343e987c75 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 394 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 393 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 3048 | n-h2-764292-3 | | 11/30/2020 4:02:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2020/12/10:03:58:15;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 392 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:02:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 391 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:01:27 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 390 | cloudbase-init | | Application | | | n-h2-764292-3 | | 11/30/2020 4:00:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 389 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 4:00:01 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 388 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 620 | 3488 | n-h2-764292-3 | S-1-5-21-3692639160-3644597375-3435922356-1000 | 11/30/2020 3:59:59 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service failed to create default configuration for new user 'N-H2-764292-3\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 387 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 3:59:59 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 386 | cloudbase-init | | Application | | | n-h2-764292-3 | | 11/30/2020 3:59:22 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'N-H2-764292-3\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 385 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 3:59:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 384 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 1700 | n-h2-764292-3 | | 11/30/2020 3:59:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 383 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 620 | 1592 | n-h2-764292-3 | S-1-5-18 | 11/30/2020 3:59:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 382 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 3:59:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 381 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 3:59:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 380 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 620 | 1200 | n-h2-764292-3 | S-1-5-18 | 11/30/2020 3:59:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 379 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 620 | 1732 | n-h2-764292-3 | S-1-5-18 | 11/30/2020 3:59:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 378 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 3:59:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 377 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | n-h2-764292-3 | | 11/30/2020 3:59:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 376 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 544 | 1504 | WIN-5T344G8GM1H | S-1-5-18 | 11/30/2020 3:58:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 375 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 11/30/2020 3:58:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 374 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/30/2020 3:58:36 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?September ?15, ?2020 5:56:35 PM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 373 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1696 | 1856 | WIN-5T344G8GM1H | | 11/30/2020 3:57:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 372 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/30/2020 3:57:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 371 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 544 | 508 | WIN-5T344G8GM1H | S-1-5-18 | 11/30/2020 3:57:23 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 544 | 1580 | WIN-5T344G8GM1H | S-1-5-18 | 11/30/2020 3:57:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 369 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 544 | 1504 | WIN-5T344G8GM1H | S-1-5-18 | 11/30/2020 3:57:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 368 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/30/2020 3:57:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/30/2020 3:57:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/30/2020 3:57:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 365 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/30/2020 3:57:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |