Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 608 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:48:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T19:47:23Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 607 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:48:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 606 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259031 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 605 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259031)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 604 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 603 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 602 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 601 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:18:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T19:17:23Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 600 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:18:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 599 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:17:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259061 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 598 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:17:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259061)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 597 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:17:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 596 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:17:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 595 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 7:17:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 594 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:48:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T18:47:23Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 593 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:48:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 592 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259091 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 591 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259091)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 590 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 589 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 588 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 587 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:18:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T18:17:22Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 586 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:18:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 585 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:17:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259121 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 584 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:17:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259121)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 583 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:17:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 582 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:17:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 581 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 6:17:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 580 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4500 | 4696 | n-h2-766043-1.cbci-766043-1.local | S-1-5-18 | 12/8/2020 5:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127afaf0
Analysis symbol:
Rechecking for solution: 0
Report Id: ee3a7a88-8f67-4635-afd6-0ac8a2957700
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 579 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127afa06
Analysis symbol:
Rechecking for solution: 0
Report Id: dbc6f8c4-8de5-4787-ab7a-e0002e3ecd95
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 578 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af90c
Analysis symbol:
Rechecking for solution: 0
Report Id: 72df8de3-9924-4e4b-a79e-6dc3de849494
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 577 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af821
Analysis symbol:
Rechecking for solution: 0
Report Id: 23156b48-2195-427a-a3fc-afc31cbce190
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 576 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af718
Analysis symbol:
Rechecking for solution: 0
Report Id: 892169ec-a38f-4ded-a865-f8b420c6f461
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 575 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af62d
Analysis symbol:
Rechecking for solution: 0
Report Id: 5423db4e-7cb8-477e-b0b8-10a317c0bfc8
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 574 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af439
Analysis symbol:
Rechecking for solution: 0
Report Id: 461c2718-06b5-4593-9f8d-54169df6c6e7
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 573 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af33f
Analysis symbol:
Rechecking for solution: 0
Report Id: 404eac8b-b205-4a73-80de-9e5f33596e52
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 572 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af236
Analysis symbol:
Rechecking for solution: 0
Report Id: 4ebe1b7c-7fb7-4a22-a236-53f3296612df
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 571 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af14b
Analysis symbol:
Rechecking for solution: 0
Report Id: 2d497522-f447-417e-a8f4-684d6020a802
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 570 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127af061
Analysis symbol:
Rechecking for solution: 0
Report Id: d54c2c6d-8c79-40d3-a0e3-26449523fd4c
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 569 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_127aef77
Analysis symbol:
Rechecking for solution: 0
Report Id: 6d29ca24-4a58-4a70-9fc7-1dd91d79297f
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 568 | Windows Error Reporting | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 567 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T17:49:24Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 566 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:50:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 565 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:49:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259149 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 564 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:49:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259149)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 563 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:49:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 562 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:49:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:<none> | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 561 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:49:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 560 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:49:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 559 | neutron-ovs-agent | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:48:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 558 | nova-compute | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:48:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'CBCI-766043-1\administrator' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 557 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:48:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 556 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:48:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T17:47:36Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 555 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:48:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 554 | cloudbase-init | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:48:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Security policy in the Group policy objects has been applied successfully. | 1704 | | 16384 | 4 | 0 | | 36028797018963968 | 553 | SceCli | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 552 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1484 | 2296 | n-h2-766043-1.cbci-766043-1.local | S-1-5-18 | 12/8/2020 5:47:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 551 | cloudbase-init | | Application | | | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 550 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259151 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 549 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259151)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 548 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 547 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 546 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1.cbci-766043-1.local | | 12/8/2020 5:47:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 545 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1484 | 1560 | n-h2-766043-1.cbci-766043-1.local | S-1-5-18 | 12/8/2020 5:47:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 544 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 1484 | 1524 | n-h2-766043-1.cbci-766043-1.local | S-1-5-18 | 12/8/2020 5:47:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 543 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 584 | 1780 | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:47:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 542 | VSS | | Application | | | n-h2-766043-1 | | 12/8/2020 5:47:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 541 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:47:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 540 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:26:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T17:25:10Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 539 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:26:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 538 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:25:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 537 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:25:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 536 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:25:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 535 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:25:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 534 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 5:25:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 533 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 844 | 1216 | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:21:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_138647f1
Analysis symbol:
Rechecking for solution: 0
Report Id: eac25f7f-252f-4e02-8b20-0a3135ec603f
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 532 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_138646c9
Analysis symbol:
Rechecking for solution: 0
Report Id: da7130e9-9a2f-4ea4-aae8-98df908bd38a
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 531 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_138645a0
Analysis symbol:
Rechecking for solution: 0
Report Id: fe9ca6ca-b8f6-412c-88a8-ac88df5fe150
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 530 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13864467
Analysis symbol:
Rechecking for solution: 0
Report Id: 81feb16d-37e7-4769-903e-22aab5b98eee
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 529 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1386432f
Analysis symbol:
Rechecking for solution: 0
Report Id: a7b5b9ed-8764-48eb-a866-9016d37e8d84
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 528 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13864206
Analysis symbol:
Rechecking for solution: 0
Report Id: a3a303b1-e6c7-4882-b768-37cae056de21
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 527 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_138640dd
Analysis symbol:
Rechecking for solution: 0
Report Id: c91a08c4-bc4f-450d-a6be-e542b5461e46
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 526 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13863f76
Analysis symbol:
Rechecking for solution: 0
Report Id: 887ab032-2842-4d42-afd8-a2b930f8801e
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 525 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10663f27
Analysis symbol:
Rechecking for solution: 0
Report Id: ee3a7a88-8f67-4635-afd6-0ac8a2957700
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 524 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xa34
Faulting application start time: 0x01d6cd8513a2dfc0
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ee3a7a88-8f67-4635-afd6-0ac8a2957700
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 523 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13863e2d
Analysis symbol:
Rechecking for solution: 0
Report Id: 5ed6e521-97af-45d1-a649-d7b1df5d6eb1
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 522 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_065e3dff
Analysis symbol:
Rechecking for solution: 0
Report Id: dbc6f8c4-8de5-4787-ab7a-e0002e3ecd95
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 521 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xd88
Faulting application start time: 0x01d6cd851374b065
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: dbc6f8c4-8de5-4787-ab7a-e0002e3ecd95
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 520 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13863cb6
Analysis symbol:
Rechecking for solution: 0
Report Id: 0f7475af-32d9-49f3-a88d-45cca42124d3
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 519 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_124a3ce5
Analysis symbol:
Rechecking for solution: 0
Report Id: 72df8de3-9924-4e4b-a79e-6dc3de849494
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 518 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x580
Faulting application start time: 0x01d6cd851348d293
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 72df8de3-9924-4e4b-a79e-6dc3de849494
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 517 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11ce3bdc
Analysis symbol:
Rechecking for solution: 0
Report Id: 23156b48-2195-427a-a3fc-afc31cbce190
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 516 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13863b6e
Analysis symbol:
Rechecking for solution: 0
Report Id: 47de550f-7b0c-4053-8933-fd79eed6d678
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 515 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1084
Faulting application start time: 0x01d6cd85131eb1d9
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 23156b48-2195-427a-a3fc-afc31cbce190
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 514 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12323a94
Analysis symbol:
Rechecking for solution: 0
Report Id: 892169ec-a38f-4ded-a865-f8b420c6f461
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 513 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1386396b
Analysis symbol:
Rechecking for solution: 0
Report Id: 5317026b-2689-4b3c-8685-eca89ac000fa
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 512 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x910
Faulting application start time: 0x01d6cd8512f21ffa
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 892169ec-a38f-4ded-a865-f8b420c6f461
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 511 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1392396b
Analysis symbol:
Rechecking for solution: 0
Report Id: 5423db4e-7cb8-477e-b0b8-10a317c0bfc8
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 510 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xe8c
Faulting application start time: 0x01d6cd8512c28461
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 5423db4e-7cb8-477e-b0b8-10a317c0bfc8
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 509 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0dbe3842
Analysis symbol:
Rechecking for solution: 0
Report Id: 461c2718-06b5-4593-9f8d-54169df6c6e7
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 508 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_138637f4
Analysis symbol:
Rechecking for solution: 0
Report Id: bc3e33bd-3ce5-4c55-bf51-b545fa998f6b
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 507 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x348
Faulting application start time: 0x01d6cd851297893d
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 461c2718-06b5-4593-9f8d-54169df6c6e7
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 506 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_110e3748
Analysis symbol:
Rechecking for solution: 0
Report Id: 404eac8b-b205-4a73-80de-9e5f33596e52
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 505 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1234
Faulting application start time: 0x01d6cd85126fda7e
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 404eac8b-b205-4a73-80de-9e5f33596e52
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 504 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_094e362f
Analysis symbol:
Rechecking for solution: 0
Report Id: 4ebe1b7c-7fb7-4a22-a236-53f3296612df
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 503 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1114
Faulting application start time: 0x01d6cd8512480471
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 4ebe1b7c-7fb7-4a22-a236-53f3296612df
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 502 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0ef63535
Analysis symbol:
Rechecking for solution: 0
Report Id: 2d497522-f447-417e-a8f4-684d6020a802
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 501 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13d4
Faulting application start time: 0x01d6cd85121ff13e
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 2d497522-f447-417e-a8f4-684d6020a802
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 500 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_094a342b
Analysis symbol:
Rechecking for solution: 0
Report Id: d54c2c6d-8c79-40d3-a0e3-26449523fd4c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 499 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1230
Faulting application start time: 0x01d6cd8511f8f010
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d54c2c6d-8c79-40d3-a0e3-26449523fd4c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 498 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f0e3312
Analysis symbol:
Rechecking for solution: 0
Report Id: 6d29ca24-4a58-4a70-9fc7-1dd91d79297f
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 497 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xf30
Faulting application start time: 0x01d6cd8511cd9c99
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 6d29ca24-4a58-4a70-9fc7-1dd91d79297f
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 496 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_08be31f8
Analysis symbol:
Rechecking for solution: 0
Report Id: eac25f7f-252f-4e02-8b20-0a3135ec603f
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 495 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1324
Faulting application start time: 0x01d6cd8511a474c5
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: eac25f7f-252f-4e02-8b20-0a3135ec603f
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 494 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f7630ef
Analysis symbol:
Rechecking for solution: 0
Report Id: 75ccfcf2-47f0-4af7-9007-ca689a3e2575
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 493 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13be310e
Analysis symbol:
Rechecking for solution: 0
Report Id: da7130e9-9a2f-4ea4-aae8-98df908bd38a
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 492 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x7fc
Faulting application start time: 0x01d6cd85117fb117
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: da7130e9-9a2f-4ea4-aae8-98df908bd38a
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 491 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_12f23024
Analysis symbol:
Rechecking for solution: 0
Report Id: fe9ca6ca-b8f6-412c-88a8-ac88df5fe150
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 490 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1128
Faulting application start time: 0x01d6cd85115b9813
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: fe9ca6ca-b8f6-412c-88a8-ac88df5fe150
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 489 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10022f0a
Analysis symbol:
Rechecking for solution: 0
Report Id: 81feb16d-37e7-4769-903e-22aab5b98eee
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 488 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f762ebc
Analysis symbol:
Rechecking for solution: 0
Report Id: 971d276f-9666-4927-918a-7d1aca32bc39
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 487 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x64
Faulting application start time: 0x01d6cd85112f95e9
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 81feb16d-37e7-4769-903e-22aab5b98eee
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 486 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0d862e20
Analysis symbol:
Rechecking for solution: 0
Report Id: a7b5b9ed-8764-48eb-a866-9016d37e8d84
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 485 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xea4
Faulting application start time: 0x01d6cd85110cad30
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a7b5b9ed-8764-48eb-a866-9016d37e8d84
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 484 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f762d84
Analysis symbol:
Rechecking for solution: 0
Report Id: d0bbd6f0-08b1-4fa5-810c-d581b9b26c2b
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 483 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_058e2d36
Analysis symbol:
Rechecking for solution: 0
Report Id: a3a303b1-e6c7-4882-b768-37cae056de21
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 482 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x10b8
Faulting application start time: 0x01d6cd8510e6a2f5
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a3a303b1-e6c7-4882-b768-37cae056de21
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 481 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f762bee
Analysis symbol:
Rechecking for solution: 0
Report Id: 841b1857-b5ef-4657-b137-7d6c1ff62701
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 480 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_02ea2c3c
Analysis symbol:
Rechecking for solution: 0
Report Id: c91a08c4-bc4f-450d-a6be-e542b5461e46
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 479 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1040
Faulting application start time: 0x01d6cd8510c1e59c
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: c91a08c4-bc4f-450d-a6be-e542b5461e46
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 478 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13422b32
Analysis symbol:
Rechecking for solution: 0
Report Id: 887ab032-2842-4d42-afd8-a2b930f8801e
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 477 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x11d8
Faulting application start time: 0x01d6cd8510993a09
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 887ab032-2842-4d42-afd8-a2b930f8801e
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 476 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f762a96
Analysis symbol:
Rechecking for solution: 0
Report Id: 912556c8-44c7-479e-a890-e4cd24f0609c
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 475 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_116e2a38
Analysis symbol:
Rechecking for solution: 0
Report Id: 5ed6e521-97af-45d1-a649-d7b1df5d6eb1
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 474 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1004
Faulting application start time: 0x01d6cd85106ec33c
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 5ed6e521-97af-45d1-a649-d7b1df5d6eb1
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 473 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0f76292e
Analysis symbol:
Rechecking for solution: 0
Report Id: 7315dac3-c313-4958-95f7-ffd6e7e1a583
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 472 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0d562900
Analysis symbol:
Rechecking for solution: 0
Report Id: 0f7475af-32d9-49f3-a88d-45cca42124d3
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 471 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xc8c
Faulting application start time: 0x01d6cd851044e369
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 0f7475af-32d9-49f3-a88d-45cca42124d3
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 470 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_115627e6
Analysis symbol:
Rechecking for solution: 0
Report Id: 47de550f-7b0c-4053-8933-fd79eed6d678
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 469 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xe8c
Faulting application start time: 0x01d6cd851018555a
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 47de550f-7b0c-4053-8933-fd79eed6d678
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 468 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0dbe26ec
Analysis symbol:
Rechecking for solution: 0
Report Id: 5317026b-2689-4b3c-8685-eca89ac000fa
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 467 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1224
Faulting application start time: 0x01d6cd850ff14b49
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 5317026b-2689-4b3c-8685-eca89ac000fa
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 466 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_087a25e3
Analysis symbol:
Rechecking for solution: 0
Report Id: bc3e33bd-3ce5-4c55-bf51-b545fa998f6b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 465 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1028
Faulting application start time: 0x01d6cd850fca66b6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: bc3e33bd-3ce5-4c55-bf51-b545fa998f6b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 464 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0e8624c9
Analysis symbol:
Rechecking for solution: 0
Report Id: 75ccfcf2-47f0-4af7-9007-ca689a3e2575
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 463 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0eae247b
Analysis symbol:
Rechecking for solution: 0
Report Id: 1d46d97e-3f1b-4785-b73c-aa2e41d44b65
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 462 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x56c
Faulting application start time: 0x01d6cd850f9dd7a0
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 75ccfcf2-47f0-4af7-9007-ca689a3e2575
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 461 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_121223cf
Analysis symbol:
Rechecking for solution: 0
Report Id: 971d276f-9666-4927-918a-7d1aca32bc39
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 460 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13a4
Faulting application start time: 0x01d6cd850f71d1ff
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 971d276f-9666-4927-918a-7d1aca32bc39
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 459 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_07862278
Analysis symbol:
Rechecking for solution: 0
Report Id: d0bbd6f0-08b1-4fa5-810c-d581b9b26c2b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 458 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x107c
Faulting application start time: 0x01d6cd850f44f0f9
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d0bbd6f0-08b1-4fa5-810c-d581b9b26c2b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 457 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?08T17:10:34.346308400Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 456 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1728 | 2264 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_05be217e
Analysis symbol:
Rechecking for solution: 0
Report Id: 841b1857-b5ef-4657-b137-7d6c1ff62701
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 455 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13f4
Faulting application start time: 0x01d6cd850f210ca6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 841b1857-b5ef-4657-b137-7d6c1ff62701
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 454 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10a62084
Analysis symbol:
Rechecking for solution: 0
Report Id: 912556c8-44c7-479e-a890-e4cd24f0609c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 453 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xc40
Faulting application start time: 0x01d6cd850ef4d856
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 912556c8-44c7-479e-a890-e4cd24f0609c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 452 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11421f5b
Analysis symbol:
Rechecking for solution: 0
Report Id: 7315dac3-c313-4958-95f7-ffd6e7e1a583
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 451 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x10ac
Faulting application start time: 0x01d6cd850ec8b377
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7315dac3-c313-4958-95f7-ffd6e7e1a583
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 450 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11161e13
Analysis symbol:
Rechecking for solution: 0
Report Id: 1d46d97e-3f1b-4785-b73c-aa2e41d44b65
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 449 | Windows Error Reporting | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 2664. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 448 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Cloudbase Open vSwitch™ for Windows®. Product Version: 2.12.1. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 447 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Cloudbase Open vSwitch™ for Windows® -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 446 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xa50
Faulting application start time: 0x01d6cd850e582fba
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 1d46d97e-3f1b-4785-b73c-aa2e41d44b65
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 445 | Application Error | | Application | | | n-h2-766043-1 | | 12/8/2020 5:10:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?08T17:10:34.346308400Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 444 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1728 | 4432 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:10:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 2664. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 443 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:10:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <3679CA35668772304D30A5FB873B0FA77BB70D54>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 442 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 1696 | n-h2-766043-1 | | 12/8/2020 5:10:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root list with effective date: ?Monday, ?October ?12, ?2020 9:49:04 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 441 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 440 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 439 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 438 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 437 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 436 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 435 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 434 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 4352 | n-h2-766043-1 | | 12/8/2020 5:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 433 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4796 | 4800 | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:02:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?08T17:02:11.967618000Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 432 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 556 | 1312 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3212. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 431 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:02:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 430 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 429 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?08T17:02:11.967618000Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 428 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 556 | 4772 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?08T17:02:11.175451200Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 427 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 556 | 1312 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?08T17:02:11.175451200Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 426 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 556 | 100 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3212. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 425 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3212. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 424 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 423 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 422 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3212. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 421 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:02:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 420 | MsiInstaller | | Application | | | n-h2-766043-1 | S-1-5-18 | 12/8/2020 5:02:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?08T17:01:18.705057600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 419 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3824 | 744 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:01:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?08T17:01:18.693166000Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 418 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3824 | 744 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1001 | 12/8/2020 5:01:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 417 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 1976 | n-h2-766043-1 | | 12/8/2020 5:00:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 416 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:59:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-09T16:58:24Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:59:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/06/06:16:58:53;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 412 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 411 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 410 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 409 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 408 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 407 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 406 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=f3c776e2-ed25-4b53-b6cc-32808488d9ec | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=f859715c-63f5-4cf2-8158-9cdc548d43c1 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 394 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 393 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 1704 | n-h2-766043-1 | | 12/8/2020 4:58:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2020/12/18:16:54:37;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 392 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:58:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 391 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:57:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 390 | cloudbase-init | | Application | | | n-h2-766043-1 | | 12/8/2020 4:56:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 389 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:56:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 388 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 584 | 2840 | n-h2-766043-1 | S-1-5-21-2267259738-32932096-2985632657-1000 | 12/8/2020 4:56:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service failed to create default configuration for new user 'N-H2-766043-1\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 387 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:56:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 386 | cloudbase-init | | Application | | | n-h2-766043-1 | | 12/8/2020 4:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'N-H2-766043-1\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 385 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:55:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 384 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1340 | 1700 | n-h2-766043-1 | | 12/8/2020 4:55:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 383 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 584 | 1368 | n-h2-766043-1 | S-1-5-18 | 12/8/2020 4:55:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 382 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 584 | 544 | n-h2-766043-1 | S-1-5-18 | 12/8/2020 4:55:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 381 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 584 | 1780 | n-h2-766043-1 | S-1-5-18 | 12/8/2020 4:55:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 380 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:55:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 379 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:55:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 378 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:55:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 377 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | n-h2-766043-1 | | 12/8/2020 4:55:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 376 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 524 | 1504 | WIN-5T344G8GM1H | S-1-5-18 | 12/8/2020 4:55:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 375 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 12/8/2020 4:55:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 374 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/8/2020 4:55:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?September ?15, ?2020 5:56:35 PM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 373 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1656 | 1784 | WIN-5T344G8GM1H | | 12/8/2020 4:53:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 372 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/8/2020 4:53:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 371 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 524 | 532 | WIN-5T344G8GM1H | S-1-5-18 | 12/8/2020 4:53:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 524 | 1572 | WIN-5T344G8GM1H | S-1-5-18 | 12/8/2020 4:53:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 369 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 524 | 1504 | WIN-5T344G8GM1H | S-1-5-18 | 12/8/2020 4:53:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 368 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/8/2020 4:53:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/8/2020 4:53:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/8/2020 4:53:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 365 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/8/2020 4:53:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |