Question
RBC
CA
Last activity: 26 Apr 2017 1:43 EDT
Pega runtime seems to be causing kernel.dll to fail on launching an application from a pega monitored application
I have a problem within my targetted run environment. I have an application launch pad (ALP) that launched other applications. The RDA bot monitors this windows application, and in most cases everything is fine. However one application WDE fails to start when the runtime is monitoring ALP. the windows event log suggests a Kernel error, yet I can see in the event log log (below) the openspan.scout is right below it. I'm not sure how to further diagnose the problem or implement a workable solution... NOTE: the system is using Avecto Defendedpoint software (which cannot be disabled) with both openspan and WDE launching in admin modes.
report.wer file from event trap
Version=1
EventType=APPCRASH
EventTime=131375418097415597
ReportType=2
Consent=1
UploadTime=131375418098351573
ReportIdentifier=65945f2d-2932-11e7-8fcc-cc52af3ffaf5
Response.BucketId=484389595
Response.BucketTable=28
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=RBC.Desktop.IWS.AutoUpdate.exe
Sig[1].Name=Application Version
Sig[1].Value= Proprietary information hidden
Sig[2].Name=Application Timestamp
Sig[2].Value=542978aa
Sig[3].Name=Fault Module Name
Sig[3].Value=KERNELBASE.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=6.1.7601.23714
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=58bf8a2e
Sig[6].Name=Exception Code
I have a problem within my targetted run environment. I have an application launch pad (ALP) that launched other applications. The RDA bot monitors this windows application, and in most cases everything is fine. However one application WDE fails to start when the runtime is monitoring ALP. the windows event log suggests a Kernel error, yet I can see in the event log log (below) the openspan.scout is right below it. I'm not sure how to further diagnose the problem or implement a workable solution... NOTE: the system is using Avecto Defendedpoint software (which cannot be disabled) with both openspan and WDE launching in admin modes.
report.wer file from event trap
Version=1
EventType=APPCRASH
EventTime=131375418097415597
ReportType=2
Consent=1
UploadTime=131375418098351573
ReportIdentifier=65945f2d-2932-11e7-8fcc-cc52af3ffaf5
Response.BucketId=484389595
Response.BucketTable=28
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=RBC.Desktop.IWS.AutoUpdate.exe
Sig[1].Name=Application Version
Sig[1].Value= Proprietary information hidden
Sig[2].Name=Application Timestamp
Sig[2].Value=542978aa
Sig[3].Name=Fault Module Name
Sig[3].Value=KERNELBASE.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=6.1.7601.23714
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=58bf8a2e
Sig[6].Name=Exception Code
Sig[6].Value=e053534f
Sig[7].Name=Exception Offset
Sig[7].Value=000000000001a06d
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7 Proprietary information hidden.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
UI[2]=c:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe
UI[3]=RBC.Desktop.IWS.AutoUpdate has stopped working
UI[4]=Windows can check online for a solution to the problem.
UI[5]=Check online for a solution and close the program
UI[6]=Check online for a solution later and close the program
UI[7]=Close the program
LoadedModule[0]=c:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe
LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\WINDOWS\SYSTEM32\MSCOREE.DLL
LoadedModule[3]=C:\WINDOWS\system32\KERNEL32.dll
LoadedModule[4]=C:\WINDOWS\system32\KERNELBASE.dll
LoadedModule[5]=C:\Program Files (x86)\OpenSpan\OpenSpan Runtime Enterprise\OpenSpan.Scout.x64.dll
LoadedModule[6]=C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.DLL
LoadedModule[7]=C:\WINDOWS\system32\advapi32.DLL
LoadedModule[8]=C:\WINDOWS\system32\msvcrt.dll
LoadedModule[9]=C:\WINDOWS\SYSTEM32\sechost.dll
LoadedModule[10]=C:\WINDOWS\system32\RPCRT4.dll
LoadedModule[11]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.security.x64.dll
LoadedModule[12]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.sharedmemory.x64.dll
LoadedModule[13]=C:\Program Files\Avecto\Privilege Guard Client\PGHook.dll
LoadedModule[14]=C:\WINDOWS\system32\CRYPTSP.dll
LoadedModule[15]=C:\WINDOWS\system32\rsaenh.dll
LoadedModule[16]=C:\WINDOWS\system32\CRYPTBASE.dll
LoadedModule[17]=C:\WINDOWS\system32\PSAPI.DLL
LoadedModule[18]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
LoadedModule[19]=C:\WINDOWS\system32\SHLWAPI.dll
LoadedModule[20]=C:\WINDOWS\system32\GDI32.dll
LoadedModule[21]=C:\WINDOWS\system32\USER32.dll
LoadedModule[22]=C:\WINDOWS\system32\LPK.dll
LoadedModule[23]=C:\WINDOWS\system32\USP10.dll
LoadedModule[24]=C:\WINDOWS\system32\IMM32.DLL
LoadedModule[25]=C:\WINDOWS\system32\MSCTF.dll
LoadedModule[26]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.wer.x64.dll
LoadedModule[27]=C:\WINDOWS\system32\dbghelp.dll
LoadedModule[28]=C:\WINDOWS\system32\SHELL32.dll
LoadedModule[29]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.brokers.windows.x64.dll
LoadedModule[30]=c:\program files (x86)\openspan\openspan runtime enterprise\OpenSpan.Utilities.x64.dll
LoadedModule[31]=C:\WINDOWS\system32\OLEAUT32.dll
LoadedModule[32]=C:\WINDOWS\system32\ole32.dll
LoadedModule[33]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.activex.x64.dll
LoadedModule[34]=C:\WINDOWS\system32\VERSION.dll
LoadedModule[35]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
LoadedModule[36]=C:\WINDOWS\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\MSVCR80.dll
LoadedModule[37]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.native.ipc.x64.dll
LoadedModule[38]=c:\program files (x86)\openspan\openspan runtime enterprise\openspan.translators.dotnet.v20.x64.dll
LoadedModule[39]=C:\WINDOWS\system32\profapi.dll
LoadedModule[40]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\mscorlib\fe6ac93181b40a571892e14bfb9d65f2\mscorlib.ni.dll
LoadedModule[41]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
LoadedModule[42]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System\9b0f837c5a73d17be9743868915d6115\System.ni.dll
LoadedModule[43]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Data\5c2371caeae4a674468eeedd1363c93e\System.Data.ni.dll
LoadedModule[44]=C:\WINDOWS\assembly\GAC_64\System.Data\ Proprietary information hidden__b77a5c561934e089\System.Data.dll
LoadedModule[45]=C:\WINDOWS\system32\WS2_32.dll
LoadedModule[46]=C:\WINDOWS\system32\NSI.dll
LoadedModule[47]=C:\WINDOWS\system32\CRYPT32.dll
LoadedModule[48]=C:\WINDOWS\system32\MSASN1.dll
LoadedModule[49]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Xml\29259da8265e0e428d9682df679f81d2\System.Xml.ni.dll
LoadedModule[50]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\System.Configuration\6c4229c7fc3ae5af06273718d7a5b935\System.Configuration.ni.dll
LoadedModule[51]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\WindowsBase\a46644fdfca242eac2cd4fc43766680f\WindowsBase.ni.dll
LoadedModule[52]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationCore\9e1f8118dca4b93b5d79c43b68e846be\PresentationCore.ni.dll
LoadedModule[53]=C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\cfe49c8df902545e06e4691641ffc85f\PresentationFramework.ni.dll
LoadedModule[54]=C:\WINDOWS\system32\shfolder.dll
LoadedModule[55]=C:\WINDOWS\system32\rasapi32.dll
LoadedModule[56]=C:\WINDOWS\system32\rasman.dll
LoadedModule[57]=C:\WINDOWS\system32\rtutils.dll
LoadedModule[58]=C:\WINDOWS\system32\mswsock.dll
LoadedModule[59]=C:\WINDOWS\System32\wshtcpip.dll
LoadedModule[60]=C:\WINDOWS\System32\wship6.dll
LoadedModule[61]=C:\WINDOWS\system32\winhttp.dll
LoadedModule[62]=C:\WINDOWS\system32\webio.dll
LoadedModule[63]=C:\WINDOWS\system32\SspiCli.dll
LoadedModule[64]=C:\WINDOWS\system32\credssp.dll
LoadedModule[65]=C:\WINDOWS\system32\IPHLPAPI.DLL
LoadedModule[66]=C:\WINDOWS\system32\WINNSI.DLL
LoadedModule[67]=C:\WINDOWS\system32\dhcpcsvc6.DLL
LoadedModule[68]=C:\WINDOWS\system32\dhcpcsvc.DLL
LoadedModule[69]=C:\WINDOWS\system32\DNSAPI.dll
LoadedModule[70]=C:\WINDOWS\system32\rasadhlp.dll
LoadedModule[71]=C:\WINDOWS\System32\fwpuclnt.dll
LoadedModule[72]=C:\WINDOWS\system32\uxtheme.dll
LoadedModule[73]=C:\WINDOWS\system32\RpcRtRemote.dll
LoadedModule[74]=C:\WINDOWS\system32\apphelp.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=DataRequest
State[1].Value=Bucket=484389595/nBucketTable=28/nResponse=1/n
FriendlyEventName=APPCRASH
ConsentKey=APPCRASH
AppName=RBC.Desktop.IWS.AutoUpdate
AppPath=C:\Program Files (x86)\GCTI\Interaction Workspace\RBC.Desktop.IWS.AutoUpdate.exe
ReportDescription=Stopped working
Pegasystems Inc.
US
This sounds like you'll need to open a support ticket if you'll need to interact with WDE using Pega Robotics. If you don't need to interact with it, you can add it to the ExcludedProcesses property of the adapter and see if that resolves the problem. This will effectively ignore it, while making it impossible to interrogate that specific process or any of its children.
Pegasystems Inc.
IN
Hi Rob,
As suggested by Thomas, you may go ahead with creating an SR for your query. The following article will be helpful for reference-
Let us know the SR number here within the thread so that we can tag it along with the thread.
Hope the information is helpful.
Thanks!