|
Posted by: DogMan - 01 September 2022 10:26:56
|
|
Log Name: ApplicationSource: Application ErrorDate: 01/09/2022 10:19:37Event ID: 1000
Task Category: (100)Level: ErrorKeywords: ClassicUser: N/AComputer: DESKTOP-f345
Description:
Faulting application name: mstsc.exe, version: 10.0.19041.1682, time stamp: 0xea45a8c9
Faulting module name: ntdll.dll, version: 10.0.19041.1806, time stamp: 0x1000a5b9
Exception code: 0xc000000d
Fault offset: 0x00000000001125e4
Faulting process id: 0x1b18
Faulting application start time: 0x01d8bde3e250393d
Faulting application path: C:\WINDOWS\system32\mstsc.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: eafd1fd0-d8c2-4e5c-a81c-d2fbd4f10fa5
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
1000 0 2 100 0 0x80000000000000 18795 Application DESKTOP-MSHAJAQ mstsc.exe 10.0.19041.1682 ea45a8c9 ntdll.dll 10.0.19041.1806 1000a5b9 c000000d 00000000001125e4 1b18 01d8bde3e250393d C:\WINDOWS\system32\mstsc.exe C:\WINDOWS\SYSTEM32\ntdll.dll eafd1fd0-d8c2-4e5c-a81c-d2fbd4f10fa5
|
|
Posted by: DogMan - 01 September 2022 10:38:12
|
|
Seems to correspond with:
Log Name: ApplicationSource: Windows Error ReportingDate: 01/09/2022 10:33:32Event ID: 1001
Task Category: NoneLevel: InformationKeywords: ClassicUser: N/AComputer: DESKTOP-f435gf4
Description:
Fault bucket 1674729131162082113, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0
Problem signature:
P1: mstsc.exe
P2: 10.0.19041.1682
P3: ea45a8c9
P4: ntdll.dll
P5: 10.0.19041.1806
P6: 1000a5b9
P7: 00000000001125e4
P8: c000000d
P9: 0000000000000000
P10:
Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3E2.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB625.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB655.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB662.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB692.tmp.txt
\\?\C:\Users\EmmaTaylor\AppData\Local\Temp\WERB6F3.tmp.appcompat.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_cab_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a\memory.hdmp
These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a
Analysis symbol:
Rechecking for solution: 0
Report Id: af1fd1f5-4983-4cf3-b077-843173e5c57c
Report Status: 268435456
Hashed bucket: bf9095f63d7b6067273dd5458dea1b41
Cab Guid: 0
Event Xml:
1001 0 4 0 0 0x80000000000000 18805 Application DESKTOP-MSHAJAQ 1674729131162082113 5 BEX64 Not available 0 mstsc.exe 10.0.19041.1682 ea45a8c9 ntdll.dll 10.0.19041.1806 1000a5b9 00000000001125e4 c000000d 0000000000000000
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3E2.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB625.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB655.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB662.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB692.tmp.txt
\\?\C:\Users\EmmaTaylor\AppData\Local\Temp\WERB6F3.tmp.appcompat.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_cab_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a\memory.hdmp \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a 0 af1fd1f5-4983-4cf3-b077-843173e5c57c 268435456 bf9095f63d7b6067273dd5458dea1b41 0
|
|
Posted by: sirclesadmin - 01 September 2022 11:15:22
|
|
Is it an HP PC?
Does it have HP Simple Pass installed?
This seems to have been a culprit in crashing mstsc.exe
|
