VMWare Worktation 15 Player:

Windows 10 Enterprise 2004

19041.508

KES 11.5.0.536

APPLICATION_HANG_c0000194_avp.exe!mainEECStartup

Reproduction steps:

i set up KES vs Malware.

1. I turned off file threat protection and HIPS.
2. i unpacked the malware and started all malware files
3. during that the running KES parts started to detect several of the malware.
4. The virtual system started to slow and hang here and there i think thats when the dump was created
5. then it suddenly was running normal again i finished starting all malware files
6. i did the recommended disinfection process.

Actual result:

KES crashed and restarted and continued to process the malware it found

Expected Result:

no crash

VMWare Worktation 15 Player:

Windows 10 Pro 2004

19041.508

KES 11.5.0.491

APPLICATION_FAULT_42849fd0_traffic_processing.dll!Unknown

Reproduction steps:

every time i start KES in my virtual machine i get this dump

second example: https://cloud.qainfo.ru/s/qAOKuZ7LPfaf9Os

VMWare Worktation 15 Player:

Windows 10 Pro 2004

19041.508

KES 11.5.0.491

Reproduction steps:

sometimes when i changed settings, file threat protection and device control in my case the gui can freeze. I had two cases where the gui froze and i could kill the process because it wasnt responding.

Actual result:

GUI froze setting changes where saved

Expected Result:

setting changes where saved

second traces example: https://cloud.qainfo.ru/s/HbrA6NkrnJfdYFH

Real system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

APPLICATION_FAULT_42849fd0_app_core_legacy.dll!Unknown

Reproduction steps:

i exited KES over the symbol on the bottom right waited a minute or two then restarted KES and got the dump

I think the issue was that KES didnt properly stopped the running processes.

Actual result:

KES didnt close processes correctly -> didnt restart

Expected Result:

KES restarted

Real system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

APPLICATION_FAULT_42849fd0_bl.ppl!Unknown

Reproduction steps:

i changed the quick scan settings to max and added most settings

i started the quick scan that when the dump was created. 

I think the dump was due to an error where KES tried to continue a scan -> Dump -> scan normaly started

Actual result:

KES tried to continue a scan and created a dump then the scan started normal from 0%

Expected Result:

Scna starts

Real system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

APPLICATION_FAULT_42849fd0_product_facade.dll!Unknown

Reproduction steps:

i tried to create a request access file for my eternal harddrive. when i clicked save (to save the file) the dump was created

Actual result:

no access file was save and an error occured

Expected Result:

access file was saved

Real system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

APPLICATION_FAULT_42849fd0_app_activity_monitor.dll!Unknown

Reproduction steps:

not sure about the cause but i think its related to playing with application controll settings too.

Real system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

APPLICATION_FAULT_42849fd0_app_activity_monitor.dll!ekaCreateObject

Reproduction steps:

1. i opened the main gui
2. settings -> Protection -> Application control
3. under Applications from registry i clicked List of applications
4. the dump was created

Actual result:

dump creation then the list was opened

Expected Result:

no dump

eal system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

APPLICATION_FAULT_42849fd0_upgrade_settings.dll!ekaGetObjectFactory

APPLICATION_FAULT_42849fd0_product_infrastructure.dll!ekaGetObjectFactory

Reproduction steps:

i ran the GSI tool during that those 2 dumps where created

Real system:

Windows 10 x64 2004

Version: 19041.450

KES 11.5.0.373 (Windows)

Reproduction steps:

i ran removal process for KES  to uninstall KES something started, then the BSOD happened

Actual result:

KES remained on system

Expected Result:

KES was uninstalled

PS: If you need the full memory dump, let me know, i excluded it due to size of 32GB

Windows Server 2019 Standard Build 17763 EN All update KES 21.2.7.373 EN

Reproduction steps:

1. Open GUI.
2. Left system included.

Actual result:

In time works product create dump.

Expected Result: 

Product works stability.