Hello team, I need help fixing this error

Question

Log Name: Application

Source: Windows Error Reporting

Date: 3/10/2025 12:57:24 PM

Event ID: 1001

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: Reception-HPAIO-PC

Description:

Fault bucket , type 0

Event Name: BlueScreen

Response: Not available

Cab Id: 0

Problem signature:

P1: 3b

P2: c000001d

P3: fffff80677d7b091

P4: ffffbd040784def0

P5: 0

P6: 10_0_22631

P7: 0_0

P8: 256_1

P9:

P10:

Attached files:

\?\C:\WINDOWS\Minidump\031025-11781-01.dmp

\?\C:\WINDOWS\SystemTemp\WER-11812-0.sysdata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.02165aae-d06a-48af-a959-f4b51a492853.tmp.WERInternalMetadata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.5d3e907c-4ec1-4ee4-8624-719f3e4e8905.tmp.csv

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.f6319414-f25c-4952-a1b7-e948bf6fd831.tmp.txt

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.39bc2a93-c4eb-4294-a0d5-0b77e2bac070.tmp.xml

These files may be available here:

\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_a6f98a2584c84295d09b2d78aa9dc5f452ab_00000000_b25e2ad3-26a7-4f5f-8389-4e224649f6fd

Analysis symbol:

Rechecking for solution: 0

Report Id: 1f3c6ff9-966a-4648-b795-1e4c6410eb9f

Report Status: 4

Hashed bucket:

Cab Guid: 0

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Windows Error Reporting" Guid="{0ead09bd-2157-539a-8d6d-c87f95b64d70}" />

<EventID>1001</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2025-03-10T17:57:24.5960033Z" />

<EventRecordID>25054</EventRecordID>

<Correlation />

<Execution ProcessID="1224" ThreadID="1228" />

<Channel>Application</Channel>

<Computer>Reception-HPAIO-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Bucket">

</Data>

<Data Name="BucketType">0</Data>

<Data Name="EventName">BlueScreen</Data>

<Data Name="Response">Not available</Data>

<Data Name="CabId">0</Data>

<Data Name="P1">3b</Data>

<Data Name="P2">c000001d</Data>

<Data Name="P3">fffff80677d7b091</Data>

<Data Name="P4">ffffbd040784def0</Data>

<Data Name="P5">0</Data>

<Data Name="P6">10_0_22631</Data>

<Data Name="P7">0_0</Data>

<Data Name="P8">256_1</Data>

<Data Name="P9">

</Data>

<Data Name="P10">

</Data>

<Data Name="AttachedFiles">

\?\C:\WINDOWS\Minidump\031025-11781-01.dmp

\?\C:\WINDOWS\SystemTemp\WER-11812-0.sysdata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.02165aae-d06a-48af-a959-f4b51a492853.tmp.WERInternalMetadata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.5d3e907c-4ec1-4ee4-8624-719f3e4e8905.tmp.csv

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.f6319414-f25c-4952-a1b7-e948bf6fd831.tmp.txt

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.39bc2a93-c4eb-4294-a0d5-0b77e2bac070.tmp.xml</Data>

<Data Name="StorePath">\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_a6f98a2584c84295d09b2d78aa9dc5f452ab_00000000_b25e2ad3-26a7-4f5f-8389-4e224649f6fd</Data>

<Data Name="AnalysisSymbol">

</Data>

<Data Name="Rechecking">0</Data>

<Data Name="ReportId">1f3c6ff9-966a-4648-b795-1e4c6410eb9f</Data>

<Data Name="ReportStatus">4</Data>

<Data Name="HashedBucket">

</Data>

<Data Name="CabGuid">0</Data>

</EventData>

</Event>

Answer 1

Hi Kjirstin Swenson,

Thanks for your post. When you see Event ID 1001 and Event ID 1000 repeatedly in the application log, it indicates an application crashing behavior. It occurs together with first- or third-party processes and points to a possible faulting module.

This article details the process of checking the event, understanding the information in the event, and handling the event based on whether it's a first- or third-party application. Debugging Tools for Windows are used in this process.Reference. https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/troubleshoot-application-service-crashing-behavior

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.