Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 543 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:13:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-16T09:12:10Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 542 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:13:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 541 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:12:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259144 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 540 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:12:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259144)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 539 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:12:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 538 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:12:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 537 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 9:12:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 536 | neutron-ovs-agent | | Application | | | hv-osbrick-7374 | | 12/15/2020 9:01:59 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 535 | cinder-volume | | Application | | | hv-osbrick-7374 | | 12/15/2020 9:01:56 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 534 | nova-compute | | Application | | | hv-osbrick-7374 | | 12/15/2020 9:01:54 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 533 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 1288 | 5012 | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:43:47 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 532 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:43:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-16T08:42:10Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 531 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:43:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 530 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:42:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 529 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:42:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 528 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:42:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 527 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:42:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 526 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:42:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a18181
Analysis symbol:
Rechecking for solution: 0
Report Id: 915e1443-0e7a-43de-b877-a1caacff5600
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 525 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:21 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a18039
Analysis symbol:
Rechecking for solution: 0
Report Id: be31f41e-c059-415b-8125-01b27b5f1d2b
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 524 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a17f2f
Analysis symbol:
Rechecking for solution: 0
Report Id: 7fe39b98-5bad-414c-8f7d-01080ac8c6d9
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 523 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a17e45
Analysis symbol:
Rechecking for solution: 0
Report Id: 4aa103ed-db2c-4b3d-9009-6be1c3f0419b
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 522 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a17ced
Analysis symbol:
Rechecking for solution: 0
Report Id: ff909b5c-16d2-4bad-b0b5-f5a47ce407da
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 521 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0ff17d0d
Analysis symbol:
Rechecking for solution: 0
Report Id: c0254fc5-7861-490e-9cdd-09dc375dcc74
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 520 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:20 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13ec
Faulting application start time: 0x01d6d2bca9ca1f17
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: c0254fc5-7861-490e-9cdd-09dc375dcc74
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 519 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_102d7c03
Analysis symbol:
Rechecking for solution: 0
Report Id: 7304249d-6c8c-49a8-8516-01dd8d3e6a56
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 518 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a17bc4
Analysis symbol:
Rechecking for solution: 0
Report Id: 3561b1c2-2e4b-4159-8017-dfd3694dd781
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 517 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x12e0
Faulting application start time: 0x01d6d2bca99fab58
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7304249d-6c8c-49a8-8516-01dd8d3e6a56
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 516 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10c17af9
Analysis symbol:
Rechecking for solution: 0
Report Id: 6fe31fd1-322b-48af-b24c-32c92d38b1a4
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 515 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a17a4d
Analysis symbol:
Rechecking for solution: 0
Report Id: 7adf874d-4077-4625-b638-12f0221a316c
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 514 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x12f4
Faulting application start time: 0x01d6d2bca9790386
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 6fe31fd1-322b-48af-b24c-32c92d38b1a4
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 513 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_122579ff
Analysis symbol:
Rechecking for solution: 0
Report Id: ea872488-3784-4f93-94d7-2d38a8c51174
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 512 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1174
Faulting application start time: 0x01d6d2bca9531fd8
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ea872488-3784-4f93-94d7-2d38a8c51174
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 511 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:19 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_119178f6
Analysis symbol:
Rechecking for solution: 0
Report Id: d63353a9-c69e-4e94-979c-cbd5806095b2
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 510 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_00a178b7
Analysis symbol:
Rechecking for solution: 0
Report Id: bb53908e-cb2a-4614-9f6a-4f4f04d07b4b
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 509 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13f8
Faulting application start time: 0x01d6d2bca92c53bd
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d63353a9-c69e-4e94-979c-cbd5806095b2
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 508 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10b977fc
Analysis symbol:
Rechecking for solution: 0
Report Id: 2bc65871-881f-482c-8a67-d14142da2b3c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 507 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xc90
Faulting application start time: 0x01d6d2bca907cfcc
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 2bc65871-881f-482c-8a67-d14142da2b3c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 506 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0a217711
Analysis symbol:
Rechecking for solution: 0
Report Id: 8abb88ee-35fa-4ff7-ad2b-e39af066d457
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 505 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1368
Faulting application start time: 0x01d6d2bca8e140f4
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 8abb88ee-35fa-4ff7-ad2b-e39af066d457
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 504 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13357608
Analysis symbol:
Rechecking for solution: 0
Report Id: d0c6b6a5-308b-40e2-bf8a-361a8cbb62c4
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 503 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x6a4
Faulting application start time: 0x01d6d2bca8b79347
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d0c6b6a5-308b-40e2-bf8a-361a8cbb62c4
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 502 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:18 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0391750e
Analysis symbol:
Rechecking for solution: 0
Report Id: bee54b85-b313-437f-a94e-489ea0d4d7b2
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 501 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x5c8
Faulting application start time: 0x01d6d2bca891bdf6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: bee54b85-b313-437f-a94e-489ea0d4d7b2
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 500 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_06e97404
Analysis symbol:
Rechecking for solution: 0
Report Id: f4fee4d0-a6b1-4441-8dc3-2baafe400f2c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 499 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13c0
Faulting application start time: 0x01d6d2bca86bcb55
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: f4fee4d0-a6b1-4441-8dc3-2baafe400f2c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 498 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0c51731a
Analysis symbol:
Rechecking for solution: 0
Report Id: 68ba60b1-e351-4f7a-b667-61a17c814252
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 497 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1248
Faulting application start time: 0x01d6d2bca847c0df
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 68ba60b1-e351-4f7a-b667-61a17c814252
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 496 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13117220
Analysis symbol:
Rechecking for solution: 0
Report Id: 52576eef-a4a7-4eb0-9f5f-9439e389f46b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 495 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x468
Faulting application start time: 0x01d6d2bca821d097
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 52576eef-a4a7-4eb0-9f5f-9439e389f46b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 494 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:17 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11d57145
Analysis symbol:
Rechecking for solution: 0
Report Id: 219072a1-f180-4f17-ac2d-bbca1cd6e593
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 493 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x11d0
Faulting application start time: 0x01d6d2bca7fd4f55
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 219072a1-f180-4f17-ac2d-bbca1cd6e593
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 492 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1349703b
Analysis symbol:
Rechecking for solution: 0
Report Id: 7ec5df41-e05b-4b22-81b4-5c1f314887d3
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 491 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x434
Faulting application start time: 0x01d6d2bca7d79232
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7ec5df41-e05b-4b22-81b4-5c1f314887d3
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 490 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13016f41
Analysis symbol:
Rechecking for solution: 0
Report Id: eb4ef0b4-b2a1-4586-8725-c0b406e4dc49
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 489 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xe78
Faulting application start time: 0x01d6d2bca7b0320c
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: eb4ef0b4-b2a1-4586-8725-c0b406e4dc49
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 488 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0ea56e38
Analysis symbol:
Rechecking for solution: 0
Report Id: 6f479715-bf01-42ad-b8ca-91c7e956d512
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 487 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x404
Faulting application start time: 0x01d6d2bca7873c64
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 6f479715-bf01-42ad-b8ca-91c7e956d512
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 486 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:16 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11d16d2e
Analysis symbol:
Rechecking for solution: 0
Report Id: 7b54d1bb-0cb5-4da1-99bb-19158ac1d3d2
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 485 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x11b0
Faulting application start time: 0x01d6d2bca75bdeb6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7b54d1bb-0cb5-4da1-99bb-19158ac1d3d2
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 484 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13916c15
Analysis symbol:
Rechecking for solution: 0
Report Id: 2f98847e-8edd-4716-972b-e1d91444c0b0
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 483 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1024
Faulting application start time: 0x01d6d2bca73367bf
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 2f98847e-8edd-4716-972b-e1d91444c0b0
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 482 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0b4d6b0b
Analysis symbol:
Rechecking for solution: 0
Report Id: 41d8e124-4d95-4fe6-b080-efb9c89c96c7
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 481 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x6e8
Faulting application start time: 0x01d6d2bca70c7a13
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 41d8e124-4d95-4fe6-b080-efb9c89c96c7
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 480 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_13216a30
Analysis symbol:
Rechecking for solution: 0
Report Id: 76ee7af3-3174-4411-9036-b864c2dd8da3
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 479 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x1234
Faulting application start time: 0x01d6d2bca6e928c5
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 76ee7af3-3174-4411-9036-b864c2dd8da3
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 478 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10a96936
Analysis symbol:
Rechecking for solution: 0
Report Id: a154bafd-0883-422b-a890-4a3f9d0ea95a
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 477 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xda4
Faulting application start time: 0x01d6d2bca6c2953a
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: a154bafd-0883-422b-a890-4a3f9d0ea95a
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 476 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1091681d
Analysis symbol:
Rechecking for solution: 0
Report Id: f9294504-68a7-45c9-9f35-dbf66fda0bc7
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 475 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x12a4
Faulting application start time: 0x01d6d2bca69b3043
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: f9294504-68a7-45c9-9f35-dbf66fda0bc7
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 474 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_123d6723
Analysis symbol:
Rechecking for solution: 0
Report Id: e7b1768b-50f8-49ab-823e-4f49062beb6c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 473 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x12fc
Faulting application start time: 0x01d6d2bca674bb25
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: e7b1768b-50f8-49ab-823e-4f49062beb6c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 472 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_10b96629
Analysis symbol:
Rechecking for solution: 0
Report Id: 184716bc-40c4-4220-bcc9-656038a946c6
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 471 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xeac
Faulting application start time: 0x01d6d2bca64f45d1
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 184716bc-40c4-4220-bcc9-656038a946c6
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 470 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:14 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1005652f
Analysis symbol:
Rechecking for solution: 0
Report Id: 915e1443-0e7a-43de-b877-a1caacff5600
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 469 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13d8
Faulting application start time: 0x01d6d2bca626e778
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 915e1443-0e7a-43de-b877-a1caacff5600
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 468 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket 1574860150864349556, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_07016454
Analysis symbol:
Rechecking for solution: 0
Report Id: d71a7f89-9b8e-4c4e-8b18-ab20442374b0
Report Status: 0
Hashed bucket: 6e7d2ac1006f07a4a5db06f697300974 | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 467 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0cb16426
Analysis symbol:
Rechecking for solution: 0
Report Id: be31f41e-c059-415b-8125-01b27b5f1d2b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 466 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xb64
Faulting application start time: 0x01d6d2bca60190c8
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: be31f41e-c059-415b-8125-01b27b5f1d2b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 465 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_1281634b
Analysis symbol:
Rechecking for solution: 0
Report Id: 7fe39b98-5bad-414c-8f7d-01080ac8c6d9
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 464 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13c8
Faulting application start time: 0x01d6d2bca5dc6b31
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7fe39b98-5bad-414c-8f7d-01080ac8c6d9
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 463 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_05a56251
Analysis symbol:
Rechecking for solution: 0
Report Id: 4aa103ed-db2c-4b3d-9009-6be1c3f0419b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 462 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x13c0
Faulting application start time: 0x01d6d2bca5b689e6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 4aa103ed-db2c-4b3d-9009-6be1c3f0419b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 461 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0d656157
Analysis symbol:
Rechecking for solution: 0
Report Id: ff909b5c-16d2-4bad-b0b5-f5a47ce407da
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 460 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xcd4
Faulting application start time: 0x01d6d2bca59021f6
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: ff909b5c-16d2-4bad-b0b5-f5a47ce407da
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 459 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?15T08:31:05.165646800Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 458 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1248 | 1860 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:31:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_0d49606c
Analysis symbol:
Rechecking for solution: 0
Report Id: 3561b1c2-2e4b-4159-8017-dfd3694dd781
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 457 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x58
Faulting application start time: 0x01d6d2bca56f6176
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 3561b1c2-2e4b-4159-8017-dfd3694dd781
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 456 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11615f82
Analysis symbol:
Rechecking for solution: 0
Report Id: 7adf874d-4077-4625-b638-12f0221a316c
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 455 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x3a0
Faulting application start time: 0x01d6d2bca5483157
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: 7adf874d-4077-4625-b638-12f0221a316c
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 454 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_11515e98
Analysis symbol:
Rechecking for solution: 0
Report Id: bb53908e-cb2a-4614-9f6a-4f4f04d07b4b
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 453 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0x258
Faulting application start time: 0x01d6d2bca524aa3f
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: bb53908e-cb2a-4614-9f6a-4f4f04d07b4b
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 452 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: ovs-vswitchd.exe
P2: 0.0.0.0
P3: 5f4ce7f4
P4: ovs-vswitchd.exe
P5: 0.0.0.0
P6: 5f4ce7f4
P7: 00000000001ed4e4
P8: c0000409
P9: 0000000000000007
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ovs-vswitchd.exe_d7c14c55585d3323f698ba0f1fe8ca781ea965f_ba3cf286_08a95d9e
Analysis symbol:
Rechecking for solution: 0
Report Id: d71a7f89-9b8e-4c4e-8b18-ab20442374b0
Report Status: 4
Hashed bucket: | 1001 | | 0 | 4 | 0 | | 36028797018963968 | 451 | Windows Error Reporting | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 4556. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 450 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:31:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Cloudbase Open vSwitch™ for Windows®. Product Version: 2.12.1. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 449 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:31:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Cloudbase Open vSwitch™ for Windows® -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 448 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:31:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Faulting application name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Faulting module name: ovs-vswitchd.exe, version: 0.0.0.0, time stamp: 0x5f4ce7f4
Exception code: 0xc0000409
Fault offset: 0x00000000001ed4e4
Faulting process id: 0xeb4
Faulting application start time: 0x01d6d2bca4c53f67
Faulting application path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Faulting module path: c:\Program Files\Cloudbase Solutions\Open vSwitch\bin\ovs-vswitchd.exe
Report Id: d71a7f89-9b8e-4c4e-8b18-ab20442374b0
Faulting package full name:
Faulting package-relative application ID: | 1000 | | 0 | 2 | 100 | | 36028797018963968 | 447 | Application Error | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:31:11 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | Application Crashing Events | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?15T08:31:05.165646800Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 446 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1248 | 4100 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:31:05 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root list with effective date: ?Monday, ?October ?12, ?2020 9:49:04 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 445 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 444 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <3679CA35668772304D30A5FB873B0FA77BB70D54>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 443 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 442 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 441 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 440 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 439 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 438 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 437 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: c:\openstack\tmp\ovs.msi. Client Process Id: 4556. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 436 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:31:04 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <3679CA35668772304D30A5FB873B0FA77BB70D54>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 435 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 1656 | hv-osbrick-7374 | | 12/15/2020 8:30:58 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 434 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 5008 | 5024 | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:19:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?15T08:19:08.562669600Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 433 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4072 | 4684 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3316. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 432 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:19:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 431 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 430 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?15T08:19:08.562669600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 429 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4072 | 3692 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:08 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2020?-?12?-?15T08:19:07.747439500Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 428 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4072 | 4684 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:08 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?15T08:19:07.747439500Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 427 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4072 | 5052 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:07 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3316. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 426 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:08 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3316. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 425 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:19:08 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 424 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:08 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 423 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:08 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3316. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 422 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:19:07 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 421 | MsiInstaller | | Application | | | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:18:59 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?15T08:18:15.455310100Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 420 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3244 | 4788 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:18:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2020?-?12?-?15T08:18:15.439727800Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 419 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3244 | 4788 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1001 | 12/15/2020 8:18:15 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE> Sha1 thumbprint: <B1BC968BD4F49D622AA89A81F2150152A41D829C>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 418 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 3224 | hv-osbrick-7374 | | 12/15/2020 8:17:32 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 417 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:16:23 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2020-12-16T08:15:23Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 416 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:16:23 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:53 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/06/13:08:15:52;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:53 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:52 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 412 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:52 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 411 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:52 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 410 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:52 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 409 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:51 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 408 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:51 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 407 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:51 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 406 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:50 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:49 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:49 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:48 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:48 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:47 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:46 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:42 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=ad2e66e5-9fba-4714-bffb-9e9e2dc94211 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=48dc4d2e-3f07-4a00-895c-d7b7e8066091 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 394 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 1392 | hv-osbrick-7374 | | 12/15/2020 8:15:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2020/12/25:08:10:34;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 393 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:15:35 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 392 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:14:54 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 391 | cloudbase-init | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:13:48 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14397)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 390 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:13:32 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 389 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 560 | 2884 | hv-osbrick-7374 | S-1-5-21-39610795-1875375793-3432049986-1000 | 12/15/2020 8:13:30 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service failed to create default configuration for new user 'HV-OSBRICK-7374\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 388 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:13:30 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 387 | cloudbase-init | | Application | | | hv-osbrick-7374 | | 12/15/2020 8:12:49 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'HV-OSBRICK-7374\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 386 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:12:47 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 385 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1328 | 1660 | hv-osbrick-7374 | | 12/15/2020 8:12:41 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 384 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 560 | 1880 | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:12:40 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 383 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:12:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 382 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:12:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 381 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:12:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 380 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 560 | 1200 | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:12:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Delete for component {D63AA156-D534-4BAC-9BF1-55359CF5EC30} failed, error code is The system cannot find the path specified.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 379 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 560 | 496 | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:12:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 378 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 560 | 1684 | hv-osbrick-7374 | S-1-5-18 | 12/15/2020 8:12:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 377 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | hv-osbrick-7374 | | 12/15/2020 8:12:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 376 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 520 | 1484 | WIN-5T344G8GM1H | S-1-5-18 | 12/15/2020 8:12:00 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 375 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 12/15/2020 8:12:00 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 374 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/15/2020 8:12:00 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of disallowed certificate list with effective date: ?Thursday, ?December ?10, ?2020 9:56:46 PM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 373 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1716 | 1828 | WIN-5T344G8GM1H | | 12/15/2020 8:10:51 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 372 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/15/2020 8:10:50 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 371 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 520 | 548 | WIN-5T344G8GM1H | S-1-5-18 | 12/15/2020 8:10:39 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 520 | 1572 | WIN-5T344G8GM1H | S-1-5-18 | 12/15/2020 8:10:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 369 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 520 | 1484 | WIN-5T344G8GM1H | S-1-5-18 | 12/15/2020 8:10:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 368 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/15/2020 8:10:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/15/2020 8:10:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/15/2020 8:10:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 365 | VSS | | Application | | | WIN-5T344G8GM1H | | 12/15/2020 8:10:38 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |