Question

2
Replies
118
Views
RobIsTheName Member since 2017 31 posts
RBC
Posted: 3 years ago
Last activity: 3 years 6 months ago
Closed

Pega runtime seems to be causing kernel.dll to fail on launching an application from a pega monitored application

I have a problem within my targetted run environment. I have an application launch pad (ALP) that launched other applications. The RDA bot monitors this windows application, and in most cases everything is fine. However one application WDE fails to start when the runtime is monitoring ALP. the windows event log suggests a Kernel error, yet I can see in the event log log (below) the openspan.scout is right below it. I'm not sure how to further diagnose the problem or implement a workable solution... NOTE: the system is using Avecto Defendedpoint software (which cannot be disabled) with both openspan and WDE launching in admin modes.

report.wer file from event trap

Version=1

EventType=APPCRASH

EventTime=131375418097415597

ReportType=2

Consent=1

UploadTime=131375418098351573

ReportIdentifier=65945f2d-2932-11e7-8fcc-cc52af3ffaf5

Response.BucketId=484389595

Response.BucketTable=28

Response.type=4

Sig[0].Name=Application Name

Sig[0].Value=RBC.Desktop.IWS.AutoUpdate.exe

Sig[1].Name=Application Version

Sig[1].Value=1.0.0.0

Sig[2].Name=Application Timestamp

Sig[2].Value=542978aa

Sig[3].Name=Fault Module Name

Sig[3].Value=KERNELBASE.dll

Sig[4].Name=Fault Module Version

Sig[4].Value=6.1.7601.23714

Sig[5].Name=Fault Module Timestamp

Sig[5].Value=58bf8a2e

Sig[6].Name=Exception Code

Sig[6].Value=e053534f

Sig[7].Name=Exception Offset

Sig[7].Value=000000000001a06d

DynamicSig[1].Name=OS Version

DynamicSig[1].Value=6.1.7601.2.1.0.256.48

DynamicSig[2].Name=Locale ID

DynamicSig[2].Value=1033

UI[2]=c:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe

UI[3]=RBC.Desktop.IWS.AutoUpdate has stopped working

UI[4]=Windows can check online for a solution to the problem.

UI[5]=Check online for a solution and close the program

UI[6]=Check online for a solution later and close the program

UI[7]=Close the program

LoadedModule[0]=c:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe

LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll

LoadedModule[2]=C:\WINDOWS\SYSTEM32\MSCOREE.DLL

LoadedModule[3]=C:\WINDOWS\system32\KERNEL32.dll

LoadedModule[4]=C:\WINDOWS\system32\KERNELBASE.dll

LoadedModule[5]=C:\Program Files (x86)\OpenSpan\OpenSpan Runtime Enterprise\OpenSpan.Scout.x64.dll

LoadedModule[6]=C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.DLL

LoadedModule[7]=C:\WINDOWS\system32\advapi32.DLL

LoadedModule[8]=C:\WINDOWS\system32\msvcrt.dll

LoadedModule[9]=C:\WINDOWS\SYSTEM32\sechost.dll

LoadedModule[10]=C:\WINDOWS\system32\RPCRT4.dll

LoadedModule[11]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.security.x64.dll

LoadedModule[12]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.sharedmemory.x64.dll

LoadedModule[13]=C:\Program Files\Avecto\Privilege Guard Client\PGHook.dll

LoadedModule[14]=C:\WINDOWS\system32\CRYPTSP.dll

LoadedModule[15]=C:\WINDOWS\system32\rsaenh.dll

LoadedModule[16]=C:\WINDOWS\system32\CRYPTBASE.dll

LoadedModule[17]=C:\WINDOWS\system32\PSAPI.DLL

LoadedModule[18]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll

LoadedModule[19]=C:\WINDOWS\system32\SHLWAPI.dll

LoadedModule[20]=C:\WINDOWS\system32\GDI32.dll

LoadedModule[21]=C:\WINDOWS\system32\USER32.dll

LoadedModule[22]=C:\WINDOWS\system32\LPK.dll

LoadedModule[23]=C:\WINDOWS\system32\USP10.dll

LoadedModule[24]=C:\WINDOWS\system32\IMM32.DLL

LoadedModule[25]=C:\WINDOWS\system32\MSCTF.dll

LoadedModule[26]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.wer.x64.dll

LoadedModule[27]=C:\WINDOWS\system32\dbghelp.dll

LoadedModule[28]=C:\WINDOWS\system32\SHELL32.dll

LoadedModule[29]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.brokers.windows.x64.dll

LoadedModule[30]=c:\program files (x86)\openspan\openspan runtime enterprise\OpenSpan.Utilities.x64.dll

LoadedModule[31]=C:\WINDOWS\system32\OLEAUT32.dll

LoadedModule[32]=C:\WINDOWS\system32\ole32.dll

LoadedModule[33]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.activex.x64.dll

LoadedModule[34]=C:\WINDOWS\system32\VERSION.dll

LoadedModule[35]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

LoadedModule[36]=C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\MSVCR80.dll

LoadedModule[37]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.native.ipc.x64.dll

LoadedModule[38]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.translators.dotnet.v20.x64.dll

LoadedModule[39]=C:\WINDOWS\system32\profapi.dll

LoadedModule[40]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\mscorlib\fe6ac93181b40a571892e14bfb9d65f2\mscorlib.ni.dll

LoadedModule[41]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll

LoadedModule[42]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System\9b0f837c5a73d17be9743868915d6115\System.ni.dll

LoadedModule[43]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Data\5c2371caeae4a674468eeedd1363c93e\System.Data.ni.dll

LoadedModule[44]=C:\WINDOWS\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

LoadedModule[45]=C:\WINDOWS\system32\WS2_32.dll

LoadedModule[46]=C:\WINDOWS\system32\NSI.dll

LoadedModule[47]=C:\WINDOWS\system32\CRYPT32.dll

LoadedModule[48]=C:\WINDOWS\system32\MSASN1.dll

LoadedModule[49]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Xml\29259da8265e0e428d9682df679f81d2\System.Xml.ni.dll

LoadedModule[50]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Configuration\6c4229c7fc3ae5af06273718d7a5b935\System.Configuration.ni.dll

LoadedModule[51]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\WindowsBase\a46644fdfca242eac2cd4fc43766680f\WindowsBase.ni.dll

LoadedModule[52]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationCore\9e1f8118dca4b93b5d79c43b68e846be\PresentationCore.ni.dll

LoadedModule[53]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\cfe49c8df902545e06e4691641ffc85f\PresentationFramework.ni.dll

LoadedModule[54]=C:\WINDOWS\system32\shfolder.dll

LoadedModule[55]=C:\WINDOWS\system32\rasapi32.dll

LoadedModule[56]=C:\WINDOWS\system32\rasman.dll

LoadedModule[57]=C:\WINDOWS\system32\rtutils.dll

LoadedModule[58]=C:\WINDOWS\system32\mswsock.dll

LoadedModule[59]=C:\WINDOWS\System32\wshtcpip.dll

LoadedModule[60]=C:\WINDOWS\System32\wship6.dll

LoadedModule[61]=C:\WINDOWS\system32\winhttp.dll

LoadedModule[62]=C:\WINDOWS\system32\webio.dll

LoadedModule[63]=C:\WINDOWS\system32\SspiCli.dll

LoadedModule[64]=C:\WINDOWS\system32\credssp.dll

LoadedModule[65]=C:\WINDOWS\system32\IPHLPAPI.DLL

LoadedModule[66]=C:\WINDOWS\system32\WINNSI.DLL

LoadedModule[67]=C:\WINDOWS\system32\dhcpcsvc6.DLL

LoadedModule[68]=C:\WINDOWS\system32\dhcpcsvc.DLL

LoadedModule[69]=C:\WINDOWS\system32\DNSAPI.dll

LoadedModule[70]=C:\WINDOWS\system32\rasadhlp.dll

LoadedModule[71]=C:\WINDOWS\System32\fwpuclnt.dll

LoadedModule[72]=C:\WINDOWS\system32\uxtheme.dll

LoadedModule[73]=C:\WINDOWS\system32\RpcRtRemote.dll

LoadedModule[74]=C:\WINDOWS\system32\apphelp.dll

State[0].Key=Transport.DoneStage1

State[0].Value=1

State[1].Key=DataRequest

State[1].Value=Bucket=484389595/nBucketTable=28/nResponse=1/n

FriendlyEventName=APPCRASH

ConsentKey=APPCRASH

AppName=RBC.Desktop.IWS.AutoUpdate

AppPath=C:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe

ReportDescription=Stopped working

Robotic Process Automation
Moderation Team has archived post
Share this page LinkedIn