Level Date and Time Source Event ID Task Category Information 6/27/2022 1:24:08 AM Microsoft-Windows-Security-SPP 903 None "The Software Protection service has stopped. " Information 6/27/2022 1:24:08 AM Microsoft-Windows-Security-SPP 16384 None Successfully scheduled Software Protection service for re-start at 2122-06-03T08:24:08Z. Reason: RulesEngine. Information 6/27/2022 1:23:38 AM SecurityCenter 15 None Updated Bitdefender Antivirus status successfully to SECURITY_PRODUCT_STATE_ON. Information 6/27/2022 1:23:38 AM SecurityCenter 15 None Updated Bitdefender Antivirus status successfully to SECURITY_PRODUCT_STATE_ON. Information 6/27/2022 1:23:38 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 6/27/2022 1:23:38 AM Microsoft-Windows-Security-SPP 902 None "The Software Protection service has started. 10.0.22621.160" Information 6/27/2022 1:23:38 AM Microsoft-Windows-Security-SPP 1003 None "The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 0567073a-7d74-403b-b2d5-6b35da372d8d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 2: 1b750385-9fe2-49a8-ab55-149d0546395b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 3: 1d873132-f09f-4eb2-bf5a-2e4fb48935e8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 4: 2b1f36bb-c1cd-4306-bf5c-a0367c2d97d8, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 5: 30d469c6-a78f-4476-b5c8-af78d5b6a5fb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 6: 3ae2cc14-ab2d-41f4-972f-5e20142771dc, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 7: 4002e33a-524c-4100-8108-131a0d42c0ea, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 8: 411b3d4f-be6d-4a06-baaa-9cabfc256cae, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 9: 58e97c99-f377-4ef1-81d5-4ad5522b5fd8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 10: 653098ee-780d-4863-8cf2-d18399ce413b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 11: 71f411ae-7b4b-41bd-b68c-c519c499f950, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 12: 74436dbb-cc17-46de-867f-14906ba4a938, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 13: 8a292df8-d653-4057-8133-a0701792f912, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 14: 8db63db6-4f8f-46d6-a448-66444faaaa72, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 15: b0f8a518-2c58-4eb8-9319-084f0eb4ddc4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 16: cd918a57-a41b-4c82-8dce-1a538e221a83, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 17: da9621af-f086-4244-b563-18611e51aa1a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 18: e371d89a-73e8-4b24-a7ff-23a3641dd18e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 19: ed799377-74b8-4989-a244-14d082e65972, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] " Information 6/27/2022 1:23:38 AM Microsoft-Windows-Security-SPP 1066 None "Initialization status for service objects. C:\WINDOWS\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 " Information 6/27/2022 1:23:38 AM Microsoft-Windows-Security-SPP 16394 None Offline downlevel migration succeeded. Information 6/27/2022 1:23:38 AM Microsoft-Windows-Security-SPP 900 None "The Software Protection service is starting. Parameters:" Information 6/27/2022 1:22:43 AM Windows Error Reporting 1001 None "Fault bucket 1890855819014486133, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: reWASDService.exe P2: 4.59.0.0 P3: 62b1a40d P4: combase.dll P5: 10.0.22621.1 P6: d2a94f20 P7: c0000005 P8: 000000000008a4bd P9: P10: Attached files: \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.f99add13-d903-4175-93ab-b713bdc79a11.tmp.mdmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d9ace96b-f339-456b-8a28-155112252258.tmp.WERInternalMetadata.xml WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20220625_1_EC_0_inject.etl \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.6ce39f91-e001-4b8d-bc2b-a00a36def033.tmp.etl WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.01a043fc-51f1-4e3e-9e90-c84f98bd026a.tmp.etl \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.2fee0517-ef87-4709-b687-0c5c815ac732.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.25493d32-0e02-4a7d-8368-9b89dda05191.tmp.txt \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.76c01d5e-1e9d-48f0-be12-0e29723de796.tmp.xml These files may be available here: \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_reWASDService.ex_d66f414a6c2c8566d97eb0ccf4fdcb6c2bc0de_8327c633_ae2687fe-a96a-4e97-8b85-12f70724f935 Analysis symbol: Rechecking for solution: 0 Report Id: 9393a720-eab9-489d-ba04-796054356590 Report Status: 268435456 Hashed bucket: 8aa9eea84b52d5940a3dab5965d6b875 Cab Guid: 0" Error 6/27/2022 1:22:42 AM Application Error 1000 Application Crashing Events "Faulting application name: reWASDService.exe, version: 4.59.0.0, time stamp: 0x62b1a40d Faulting module name: combase.dll, version: 10.0.22621.1, time stamp: 0xd2a94f20 Exception code: 0xc0000005 Fault offset: 0x000000000008a4bd Faulting process id: 0x0x25DC Faulting application start time: 0x0x1D889FF1256D3E4 Faulting application path: C:\Program Files\reWASD\reWASDService.exe Faulting module path: C:\WINDOWS\System32\combase.dll Report Id: 9393a720-eab9-489d-ba04-796054356590 Faulting package full name: Faulting package-relative application ID: " Error 6/27/2022 1:22:01 AM Microsoft-Windows-CertificateServicesClient-CertEnroll 86 None "SCEP Certificate enrollment initialization for WORKGROUP\COLLECTIVE$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed: GetCACaps GetCACaps: Not Found {""Message"":""The authority \""amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\"" does not exist.""} HTTP/1.1 404 Not Found Date: Mon, 27 Jun 2022 08:22:00 GMT Content-Length: 121 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: b47cc04d-681f-458b-9971-540642cef96c Method: GET(109ms) Stage: GetCACaps Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)" Error 6/27/2022 1:22:01 AM Microsoft-Windows-CertificateServicesClient-CertEnroll 86 None "SCEP Certificate enrollment initialization for Local system via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed: GetCACaps GetCACaps: Not Found {""Message"":""The authority \""amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\"" does not exist.""} HTTP/1.1 404 Not Found Date: Mon, 27 Jun 2022 08:22:00 GMT Content-Length: 121 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: 77866cfc-970b-4c43-bc98-1d4e103ea584 Method: GET(266ms) Stage: GetCACaps Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)" Warning 6/27/2022 1:21:59 AM Microsoft-Windows-CertificateServicesClient-AutoEnrollment 64 None Certificate for local system with Thumbprint 91 bd 33 3b f3 e4 d9 f6 4c 19 a7 cd a9 9c c8 57 60 22 da a2 is about to expire or already expired. Information 6/27/2022 1:21:50 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 6/27/2022 1:21:47 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 6/27/2022 1:21:43 AM Microsoft-Windows-Winlogon 6003 None The winlogon notification subscriber was unavailable to handle a critical notification event. Information 6/27/2022 1:21:37 AM AsusFanControlService 0 None The operation completed successfully. Information 6/27/2022 1:21:37 AM asComSvc 0 None The operation completed successfully. Information 6/27/2022 1:21:36 AM MsiInstaller 1035 None Windows Installer reconfigured the product. Product Name: Microsoft GameInput. Product Version: 10.1.22621.1011. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. Information 6/27/2022 1:21:35 AM DockerService 0 None Service started successfully. Information 6/27/2022 1:21:34 AM edgeupdate 0 None Service stopped. Information 6/27/2022 1:21:34 AM LightingService 0 None The operation completed successfully. Information 6/27/2022 1:21:33 AM AGSService 0 None The operation completed successfully. Information 6/27/2022 1:21:33 AM AGMService 0 None The operation completed successfully. Information 6/27/2022 1:21:33 AM Wondershare InstallAssist 0 None The operation completed successfully. Warning 6/27/2022 1:21:33 AM EvntAgnt 3007 None Error opening event log file State. Log will not be processed. Return code from OpenEventLog is 87. Warning 6/27/2022 1:21:33 AM EvntAgnt 3007 None Error opening event log file Parameters. Log will not be processed. Return code from OpenEventLog is 87. Information 6/27/2022 1:21:33 AM LogiRegistryService 0 None The operation completed successfully. Information 6/27/2022 1:21:33 AM AsusUpdateCheck 0 None The operation completed successfully. Information 6/27/2022 1:21:33 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 6/27/2022 1:21:33 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 6/27/2022 1:21:32 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 6/27/2022 1:21:33 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 6/27/2022 1:20:39 AM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Error 6/27/2022 1:20:39 AM VSS 13 None "Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress. ] " Information 6/27/2022 1:20:39 AM VSS 8225 None The VSS service is shutting down due to shutdown event from the Service Control Manager. Information 6/27/2022 1:20:39 AM DockerService 0 None Service has been successfully shut down. Information 6/27/2022 1:20:23 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 6/27/2022 1:20:23 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 6/27/2022 1:20:16 AM Windows Error Reporting 1001 None "Fault bucket 1890855819014486133, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: reWASDService.exe P2: 4.59.0.0 P3: 62b1a40d P4: combase.dll P5: 10.0.22621.1 P6: d2a94f20 P7: c0000005 P8: 000000000008a4bd P9: P10: Attached files: \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d2c81d50-eb91-4e4b-870e-dc175a66e12e.tmp.mdmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d9180def-fe7b-4ed2-927c-416ba58e06a4.tmp.WERInternalMetadata.xml WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20220625_1_EC_0_inject.etl \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.df21b490-c605-4288-9be3-5966302e6f40.tmp.etl WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.43a210a1-8c0b-4381-8f52-4058eb408355.tmp.etl \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.ce4f2134-9870-483c-828b-2aba9e5004a0.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.4f027ccc-41be-4f46-9188-30d842c826b2.tmp.txt \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.0fc6a0be-cb2e-4e6f-9527-236283ed1330.tmp.xml These files may be available here: \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_reWASDService.ex_d66f414a6c2c8566d97eb0ccf4fdcb6c2bc0de_8327c633_d6aa412f-64c3-4826-bd34-d13920e8089b Analysis symbol: Rechecking for solution: 0 Report Id: 4ceca84a-2339-4e7d-bc9c-9261639c86f4 Report Status: 268435456 Hashed bucket: 8aa9eea84b52d5940a3dab5965d6b875 Cab Guid: 0" Error 6/27/2022 1:20:14 AM Application Error 1000 Application Crashing Events "Faulting application name: reWASDService.exe, version: 4.59.0.0, time stamp: 0x62b1a40d Faulting module name: combase.dll, version: 10.0.22621.1, time stamp: 0xd2a94f20 Exception code: 0xc0000005 Fault offset: 0x000000000008a4bd Faulting process id: 0x0x46D8 Faulting application start time: 0x0x1D889FEBA1BEB54 Faulting application path: C:\Program Files\reWASD\reWASDService.exe Faulting module path: C:\WINDOWS\System32\combase.dll Report Id: 4ceca84a-2339-4e7d-bc9c-9261639c86f4 Faulting package full name: Faulting package-relative application ID: "