Howdy folks,
I've got another one for ya! We're really chipping away at my list; we're 90.3% finished.
This server in particular is stubbornly throwing hash mismatches on five WinSxS component payloads that I don't have anywhere else in my fleet.
CBS.log is attached, but here's what I'm looking at:
I'm wondering if perhaps you folks have access to those five payloads! :)
Thanks!
I've got another one for ya! We're really chipping away at my list; we're 90.3% finished.
This server in particular is stubbornly throwing hash mismatches on five WinSxS component payloads that I don't have anywhere else in my fleet.
CBS.log is attached, but here's what I'm looking at:
Code:
2022-10-06 15:19:11, Info CSI 0000000b Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-p..erandprintui-pmcppc_31bf3856ad364e35_6.3.9600.19785_none_fc27658154a806d2\pmcsnap.dll do not match actual file [l:22{11}]"pmcsnap.dll" :
Found: {l:32 b:2evR0xlq8Q0BsmokedLK9RLcNBItK6i0aJbxHQN4QkA=} Expected: {l:32 b:UupaYJgORsnQcEWQp14bPjqE0Dxx9t/+viak0quCXgM=}
2022-10-06 15:19:13, Info CBS TI: CBS has queried the current reboot required state: 0
2022-10-06 15:19:13, Info CBS Session: 30988728_2199831918 finalized. Reboot required: no [HRESULT = 0x00000000 - S_OK]
2022-10-06 15:25:02, Info CSI 0000000c Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.3.9600.19780_none_4be0dc5540a1c2df\winload.efi do not match actual file [l:22{11}]"winload.efi" :
Found: {l:32 b:+64ktwwz+8rU4YNCLA+bzcF5n/qzvICOMNUQ6h6UZ44=} Expected: {l:32 b:mhFD044eFMIeDuWuOP7KTYbsPIABRHpdS1AoemgZyT0=}
2022-10-06 15:25:02, Info CSI 0000000d Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.3.9600.19780_none_4be0dc5540a1c2df\winload.exe do not match actual file [l:22{11}]"winload.exe" :
Found: {l:32 b:/bYRA89up6503uEcq4jrxzC/WNEMCSIIQMLi+oAIYIU=} Expected: {l:32 b:IY170jh1WxTMPLraPqVm7CoRNLBEIwc4XFAQvvkAcrs=}
2022-10-06 15:25:02, Info CSI 0000000e Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.3.9600.19780_none_4be0dc5540a1c2df\winresume.efi do not match actual file [l:26{13}]"winresume.efi" :
Found: {l:32 b:G4LzfJFdy7neujm0aTYOupXxMPus+nBeL8TY1eRr6cc=} Expected: {l:32 b:ORuBAi4FAHnP5fma7IOHiw9laBKEeiFzQWqe6amujGU=}
2022-10-06 15:25:02, Info CSI 0000000f Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.3.9600.19780_none_4be0dc5540a1c2df\winresume.exe do not match actual file [l:26{13}]"winresume.exe" :
Found: {l:32 b:ejukikKXs3x04YUWacl6aDwl07wT4o/+sDARpWG7DjQ=} Expected: {l:32 b:hK5Me0JKWHgeelmsMGAxuvaxEervtuUNAcZqsOvOPkY=}
2022-10-06 15:32:42, Info CSI 00000010@2022/10/6:19:32:42.649 Corruption detection complete. numCorruptions = 5, Disp = 1.
I'm wondering if perhaps you folks have access to those five payloads! :)
Thanks!