Question

2
Replies
126
Views
Robert Fleming (RobIsTheName)
RBC
Senior Manager, Process Automation
RBC
CA
RobIsTheName Member since 2017 31 posts
RBC
Posted: April 25, 2017
Last activity: April 26, 2017
Posted: 25 Apr 2017 10:01 EDT
Last activity: 26 Apr 2017 1:43 EDT
Closed

Pega runtime seems to be causing kernel.dll to fail on launching an application from a pega monitored application

I have a problem within my targetted run environment. I have an application launch pad (ALP) that launched other applications. The RDA bot monitors this windows application, and in most cases everything is fine. However one application WDE fails to start when the runtime is monitoring ALP. the windows event log suggests a Kernel error, yet I can see in the event log log (below) the openspan.scout is right below it. I'm not sure how to further diagnose the problem or implement a workable solution... NOTE: the system is using Avecto Defendedpoint software (which cannot be disabled) with both openspan and WDE launching in admin modes.




report.wer file from event trap


Version=1


EventType=APPCRASH


EventTime=131375418097415597


ReportType=2


Consent=1


UploadTime=131375418098351573


ReportIdentifier=65945f2d-2932-11e7-8fcc-cc52af3ffaf5


Response.BucketId=484389595


Response.BucketTable=28


Response.type=4


Sig[0].Name=Application Name


Sig[0].Value=RBC.Desktop.IWS.AutoUpdate.exe


Sig[1].Name=Application Version


Sig[1].Value=1.0.0.0


Sig[2].Name=Application Timestamp


Sig[2].Value=542978aa


Sig[3].Name=Fault Module Name


Sig[3].Value=KERNELBASE.dll


Sig[4].Name=Fault Module Version


Sig[4].Value=6.1.7601.23714


Sig[5].Name=Fault Module Timestamp


Sig[5].Value=58bf8a2e


Sig[6].Name=Exception Code

I have a problem within my targetted run environment. I have an application launch pad (ALP) that launched other applications. The RDA bot monitors this windows application, and in most cases everything is fine. However one application WDE fails to start when the runtime is monitoring ALP. the windows event log suggests a Kernel error, yet I can see in the event log log (below) the openspan.scout is right below it. I'm not sure how to further diagnose the problem or implement a workable solution... NOTE: the system is using Avecto Defendedpoint software (which cannot be disabled) with both openspan and WDE launching in admin modes.

report.wer file from event trap

Version=1

EventType=APPCRASH

EventTime=131375418097415597

ReportType=2

Consent=1

UploadTime=131375418098351573

ReportIdentifier=65945f2d-2932-11e7-8fcc-cc52af3ffaf5

Response.BucketId=484389595

Response.BucketTable=28

Response.type=4

Sig[0].Name=Application Name

Sig[0].Value=RBC.Desktop.IWS.AutoUpdate.exe

Sig[1].Name=Application Version

Sig[1].Value=1.0.0.0

Sig[2].Name=Application Timestamp

Sig[2].Value=542978aa

Sig[3].Name=Fault Module Name

Sig[3].Value=KERNELBASE.dll

Sig[4].Name=Fault Module Version

Sig[4].Value=6.1.7601.23714

Sig[5].Name=Fault Module Timestamp

Sig[5].Value=58bf8a2e

Sig[6].Name=Exception Code

Sig[6].Value=e053534f

Sig[7].Name=Exception Offset

Sig[7].Value=000000000001a06d

DynamicSig[1].Name=OS Version

DynamicSig[1].Value=6.1.7601.2.1.0.256.48

DynamicSig[2].Name=Locale ID

DynamicSig[2].Value=1033

UI[2]=c:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe

UI[3]=RBC.Desktop.IWS.AutoUpdate has stopped working

UI[4]=Windows can check online for a solution to the problem.

UI[5]=Check online for a solution and close the program

UI[6]=Check online for a solution later and close the program

UI[7]=Close the program

LoadedModule[0]=c:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe

LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll

LoadedModule[2]=C:\WINDOWS\SYSTEM32\MSCOREE.DLL

LoadedModule[3]=C:\WINDOWS\system32\KERNEL32.dll

LoadedModule[4]=C:\WINDOWS\system32\KERNELBASE.dll

LoadedModule[5]=C:\Program Files (x86)\OpenSpan\OpenSpan Runtime Enterprise\OpenSpan.Scout.x64.dll

LoadedModule[6]=C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.DLL

LoadedModule[7]=C:\WINDOWS\system32\advapi32.DLL

LoadedModule[8]=C:\WINDOWS\system32\msvcrt.dll

LoadedModule[9]=C:\WINDOWS\SYSTEM32\sechost.dll

LoadedModule[10]=C:\WINDOWS\system32\RPCRT4.dll

LoadedModule[11]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.security.x64.dll

LoadedModule[12]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.sharedmemory.x64.dll

LoadedModule[13]=C:\Program Files\Avecto\Privilege Guard Client\PGHook.dll

LoadedModule[14]=C:\WINDOWS\system32\CRYPTSP.dll

LoadedModule[15]=C:\WINDOWS\system32\rsaenh.dll

LoadedModule[16]=C:\WINDOWS\system32\CRYPTBASE.dll

LoadedModule[17]=C:\WINDOWS\system32\PSAPI.DLL

LoadedModule[18]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll

LoadedModule[19]=C:\WINDOWS\system32\SHLWAPI.dll

LoadedModule[20]=C:\WINDOWS\system32\GDI32.dll

LoadedModule[21]=C:\WINDOWS\system32\USER32.dll

LoadedModule[22]=C:\WINDOWS\system32\LPK.dll

LoadedModule[23]=C:\WINDOWS\system32\USP10.dll

LoadedModule[24]=C:\WINDOWS\system32\IMM32.DLL

LoadedModule[25]=C:\WINDOWS\system32\MSCTF.dll

LoadedModule[26]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.wer.x64.dll

LoadedModule[27]=C:\WINDOWS\system32\dbghelp.dll

LoadedModule[28]=C:\WINDOWS\system32\SHELL32.dll

LoadedModule[29]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.brokers.windows.x64.dll

LoadedModule[30]=c:\program files (x86)\openspan\openspan runtime enterprise\OpenSpan.Utilities.x64.dll

LoadedModule[31]=C:\WINDOWS\system32\OLEAUT32.dll

LoadedModule[32]=C:\WINDOWS\system32\ole32.dll

LoadedModule[33]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.activex.x64.dll

LoadedModule[34]=C:\WINDOWS\system32\VERSION.dll

LoadedModule[35]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

LoadedModule[36]=C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\MSVCR80.dll

LoadedModule[37]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.native.ipc.x64.dll

LoadedModule[38]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.translators.dotnet.v20.x64.dll

LoadedModule[39]=C:\WINDOWS\system32\profapi.dll

LoadedModule[40]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\mscorlib\fe6ac93181b40a571892e14bfb9d65f2\mscorlib.ni.dll

LoadedModule[41]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll

LoadedModule[42]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System\9b0f837c5a73d17be9743868915d6115\System.ni.dll

LoadedModule[43]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Data\5c2371caeae4a674468eeedd1363c93e\System.Data.ni.dll

LoadedModule[44]=C:\WINDOWS\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

LoadedModule[45]=C:\WINDOWS\system32\WS2_32.dll

LoadedModule[46]=C:\WINDOWS\system32\NSI.dll

LoadedModule[47]=C:\WINDOWS\system32\CRYPT32.dll

LoadedModule[48]=C:\WINDOWS\system32\MSASN1.dll

LoadedModule[49]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Xml\29259da8265e0e428d9682df679f81d2\System.Xml.ni.dll

LoadedModule[50]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Configuration\6c4229c7fc3ae5af06273718d7a5b935\System.Configuration.ni.dll

LoadedModule[51]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\WindowsBase\a46644fdfca242eac2cd4fc43766680f\WindowsBase.ni.dll

LoadedModule[52]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationCore\9e1f8118dca4b93b5d79c43b68e846be\PresentationCore.ni.dll

LoadedModule[53]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\cfe49c8df902545e06e4691641ffc85f\PresentationFramework.ni.dll

LoadedModule[54]=C:\WINDOWS\system32\shfolder.dll

LoadedModule[55]=C:\WINDOWS\system32\rasapi32.dll

LoadedModule[56]=C:\WINDOWS\system32\rasman.dll

LoadedModule[57]=C:\WINDOWS\system32\rtutils.dll

LoadedModule[58]=C:\WINDOWS\system32\mswsock.dll

LoadedModule[59]=C:\WINDOWS\System32\wshtcpip.dll

LoadedModule[60]=C:\WINDOWS\System32\wship6.dll

LoadedModule[61]=C:\WINDOWS\system32\winhttp.dll

LoadedModule[62]=C:\WINDOWS\system32\webio.dll

LoadedModule[63]=C:\WINDOWS\system32\SspiCli.dll

LoadedModule[64]=C:\WINDOWS\system32\credssp.dll

LoadedModule[65]=C:\WINDOWS\system32\IPHLPAPI.DLL

LoadedModule[66]=C:\WINDOWS\system32\WINNSI.DLL

LoadedModule[67]=C:\WINDOWS\system32\dhcpcsvc6.DLL

LoadedModule[68]=C:\WINDOWS\system32\dhcpcsvc.DLL

LoadedModule[69]=C:\WINDOWS\system32\DNSAPI.dll

LoadedModule[70]=C:\WINDOWS\system32\rasadhlp.dll

LoadedModule[71]=C:\WINDOWS\System32\fwpuclnt.dll

LoadedModule[72]=C:\WINDOWS\system32\uxtheme.dll

LoadedModule[73]=C:\WINDOWS\system32\RpcRtRemote.dll

LoadedModule[74]=C:\WINDOWS\system32\apphelp.dll

State[0].Key=Transport.DoneStage1

State[0].Value=1

State[1].Key=DataRequest

State[1].Value=Bucket=484389595/nBucketTable=28/nResponse=1/n

FriendlyEventName=APPCRASH

ConsentKey=APPCRASH

AppName=RBC.Desktop.IWS.AutoUpdate

AppPath=C:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe

ReportDescription=Stopped working

Robotic Process Automation
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.