Level	Date and Time	Source	Event ID	Task Category
Information	6/27/2022 1:24:08 AM	Microsoft-Windows-Security-SPP	903	None	"The Software Protection service has stopped.
"
Information	6/27/2022 1:24:08 AM	Microsoft-Windows-Security-SPP	16384	None	Successfully scheduled Software Protection service for re-start at 2122-06-03T08:24:08Z. Reason: RulesEngine.
Information	6/27/2022 1:23:38 AM	SecurityCenter	15	None	Updated Bitdefender Antivirus status successfully to SECURITY_PRODUCT_STATE_ON.
Information	6/27/2022 1:23:38 AM	SecurityCenter	15	None	Updated Bitdefender Antivirus status successfully to SECURITY_PRODUCT_STATE_ON.
Information	6/27/2022 1:23:38 AM	SecurityCenter	1	None	The Windows Security Center Service has started.
Information	6/27/2022 1:23:38 AM	Microsoft-Windows-Security-SPP	902	None	"The Software Protection service has started.
10.0.22621.160"
Information	6/27/2022 1:23:38 AM	Microsoft-Windows-Security-SPP	1003	None	"The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 0567073a-7d74-403b-b2d5-6b35da372d8d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 1b750385-9fe2-49a8-ab55-149d0546395b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 1d873132-f09f-4eb2-bf5a-2e4fb48935e8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 2b1f36bb-c1cd-4306-bf5c-a0367c2d97d8, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
5: 30d469c6-a78f-4476-b5c8-af78d5b6a5fb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 3ae2cc14-ab2d-41f4-972f-5e20142771dc, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
7: 4002e33a-524c-4100-8108-131a0d42c0ea, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: 411b3d4f-be6d-4a06-baaa-9cabfc256cae, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: 58e97c99-f377-4ef1-81d5-4ad5522b5fd8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: 653098ee-780d-4863-8cf2-d18399ce413b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: 71f411ae-7b4b-41bd-b68c-c519c499f950, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: 74436dbb-cc17-46de-867f-14906ba4a938, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: 8a292df8-d653-4057-8133-a0701792f912, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
14: 8db63db6-4f8f-46d6-a448-66444faaaa72, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
15: b0f8a518-2c58-4eb8-9319-084f0eb4ddc4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
16: cd918a57-a41b-4c82-8dce-1a538e221a83, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
17: da9621af-f086-4244-b563-18611e51aa1a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
18: e371d89a-73e8-4b24-a7ff-23a3641dd18e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
19: ed799377-74b8-4989-a244-14d082e65972, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]

"
Information	6/27/2022 1:23:38 AM	Microsoft-Windows-Security-SPP	1066	None	"Initialization status for service objects.
C:\WINDOWS\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\WINDOWS\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
"
Information	6/27/2022 1:23:38 AM	Microsoft-Windows-Security-SPP	16394	None	Offline downlevel migration succeeded.
Information	6/27/2022 1:23:38 AM	Microsoft-Windows-Security-SPP	900	None	"The Software Protection service is starting.
Parameters:<explicit>"
Information	6/27/2022 1:22:43 AM	Windows Error Reporting	1001	None	"Fault bucket 1890855819014486133, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: reWASDService.exe
P2: 4.59.0.0
P3: 62b1a40d
P4: combase.dll
P5: 10.0.22621.1
P6: d2a94f20
P7: c0000005
P8: 000000000008a4bd
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.f99add13-d903-4175-93ab-b713bdc79a11.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d9ace96b-f339-456b-8a28-155112252258.tmp.WERInternalMetadata.xml
WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20220625_1_EC_0_inject.etl
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.6ce39f91-e001-4b8d-bc2b-a00a36def033.tmp.etl
WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.01a043fc-51f1-4e3e-9e90-c84f98bd026a.tmp.etl
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.2fee0517-ef87-4709-b687-0c5c815ac732.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.25493d32-0e02-4a7d-8368-9b89dda05191.tmp.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.76c01d5e-1e9d-48f0-be12-0e29723de796.tmp.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_reWASDService.ex_d66f414a6c2c8566d97eb0ccf4fdcb6c2bc0de_8327c633_ae2687fe-a96a-4e97-8b85-12f70724f935

Analysis symbol: 
Rechecking for solution: 0
Report Id: 9393a720-eab9-489d-ba04-796054356590
Report Status: 268435456
Hashed bucket: 8aa9eea84b52d5940a3dab5965d6b875
Cab Guid: 0"
Error	6/27/2022 1:22:42 AM	Application Error	1000	Application Crashing Events	"Faulting application name: reWASDService.exe, version: 4.59.0.0, time stamp: 0x62b1a40d
Faulting module name: combase.dll, version: 10.0.22621.1, time stamp: 0xd2a94f20
Exception code: 0xc0000005
Fault offset: 0x000000000008a4bd
Faulting process id: 0x0x25DC
Faulting application start time: 0x0x1D889FF1256D3E4
Faulting application path: C:\Program Files\reWASD\reWASDService.exe
Faulting module path: C:\WINDOWS\System32\combase.dll
Report Id: 9393a720-eab9-489d-ba04-796054356590
Faulting package full name: 
Faulting package-relative application ID: "
Error	6/27/2022 1:22:01 AM	Microsoft-Windows-CertificateServicesClient-CertEnroll	86	None	"SCEP Certificate enrollment initialization for WORKGROUP\COLLECTIVE$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{""Message"":""The authority \""amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\"" does not exist.""}
HTTP/1.1 404 Not Found
Date: Mon, 27 Jun 2022 08:22:00 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: b47cc04d-681f-458b-9971-540642cef96c

Method: GET(109ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)"
Error	6/27/2022 1:22:01 AM	Microsoft-Windows-CertificateServicesClient-CertEnroll	86	None	"SCEP Certificate enrollment initialization for Local system via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{""Message"":""The authority \""amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\"" does not exist.""}
HTTP/1.1 404 Not Found
Date: Mon, 27 Jun 2022 08:22:00 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 77866cfc-970b-4c43-bc98-1d4e103ea584

Method: GET(266ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)"
Warning	6/27/2022 1:21:59 AM	Microsoft-Windows-CertificateServicesClient-AutoEnrollment	64	None	Certificate for local system with Thumbprint 91 bd 33 3b f3 e4 d9 f6 4c 19 a7 cd a9 9c c8 57 60 22 da a2 is about to expire or already expired.
Information	6/27/2022 1:21:50 AM	Microsoft-Windows-Search	1003	Search service	The Windows Search Service started.

Information	6/27/2022 1:21:47 AM	Microsoft-Windows-Winlogon	6000	None	The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Information	6/27/2022 1:21:43 AM	Microsoft-Windows-Winlogon	6003	None	The winlogon notification subscriber <SessionEnv> was unavailable to handle a critical notification event.
Information	6/27/2022 1:21:37 AM	AsusFanControlService	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:37 AM	asComSvc	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:36 AM	MsiInstaller	1035	None	Windows Installer reconfigured the product. Product Name: Microsoft GameInput. Product Version: 10.1.22621.1011. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0.
Information	6/27/2022 1:21:35 AM	DockerService	0	None	Service started successfully.
Information	6/27/2022 1:21:34 AM	edgeupdate	0	None	Service stopped.
Information	6/27/2022 1:21:34 AM	LightingService	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:33 AM	AGSService	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:33 AM	AGMService	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:33 AM	Wondershare InstallAssist	0	None	The operation completed successfully. 
Warning	6/27/2022 1:21:33 AM	EvntAgnt	3007	None	Error opening event log file State. Log will not be processed. Return code from OpenEventLog is 87.
Warning	6/27/2022 1:21:33 AM	EvntAgnt	3007	None	Error opening event log file Parameters. Log will not be processed. Return code from OpenEventLog is 87.
Information	6/27/2022 1:21:33 AM	LogiRegistryService	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:33 AM	AsusUpdateCheck	0	None	The operation completed successfully. 
Information	6/27/2022 1:21:33 AM	Microsoft-Windows-WMI	5617	None	Windows Management Instrumentation Service subsystems initialized successfully
Information	6/27/2022 1:21:33 AM	Microsoft-Windows-WMI	5615	None	Windows Management Instrumentation Service started sucessfully
Information	6/27/2022 1:21:32 AM	Microsoft-Windows-User Profiles Service	1531	None	"The User Profile Service has started successfully.  

"
Information	6/27/2022 1:21:33 AM	Microsoft-Windows-EventSystem	4625	None	The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Information	6/27/2022 1:20:39 AM	Microsoft-Windows-User Profiles Service	1532	None	"The User Profile Service has stopped.  

"
Error	6/27/2022 1:20:39 AM	VSS	13	None	"Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
] "
Information	6/27/2022 1:20:39 AM	VSS	8225	None	The VSS service is shutting down due to shutdown event from the Service Control Manager. 
Information	6/27/2022 1:20:39 AM	DockerService	0	None	Service has been successfully shut down.
Information	6/27/2022 1:20:23 AM	Microsoft-Windows-Winlogon	6000	None	The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Information	6/27/2022 1:20:23 AM	Microsoft-Windows-Winlogon	6000	None	The winlogon notification subscriber <WSearch> was unavailable to handle a notification event.
Information	6/27/2022 1:20:16 AM	Windows Error Reporting	1001	None	"Fault bucket 1890855819014486133, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: reWASDService.exe
P2: 4.59.0.0
P3: 62b1a40d
P4: combase.dll
P5: 10.0.22621.1
P6: d2a94f20
P7: c0000005
P8: 000000000008a4bd
P9: 
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d2c81d50-eb91-4e4b-870e-dc175a66e12e.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d9180def-fe7b-4ed2-927c-416ba58e06a4.tmp.WERInternalMetadata.xml
WPR_initiated_DiagTrackMiniLogger_OneTrace_User_Logger_20220625_1_EC_0_inject.etl
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.df21b490-c605-4288-9be3-5966302e6f40.tmp.etl
WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.43a210a1-8c0b-4381-8f52-4058eb408355.tmp.etl
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.ce4f2134-9870-483c-828b-2aba9e5004a0.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.4f027ccc-41be-4f46-9188-30d842c826b2.tmp.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.0fc6a0be-cb2e-4e6f-9527-236283ed1330.tmp.xml

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_reWASDService.ex_d66f414a6c2c8566d97eb0ccf4fdcb6c2bc0de_8327c633_d6aa412f-64c3-4826-bd34-d13920e8089b

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4ceca84a-2339-4e7d-bc9c-9261639c86f4
Report Status: 268435456
Hashed bucket: 8aa9eea84b52d5940a3dab5965d6b875
Cab Guid: 0"
Error	6/27/2022 1:20:14 AM	Application Error	1000	Application Crashing Events	"Faulting application name: reWASDService.exe, version: 4.59.0.0, time stamp: 0x62b1a40d
Faulting module name: combase.dll, version: 10.0.22621.1, time stamp: 0xd2a94f20
Exception code: 0xc0000005
Fault offset: 0x000000000008a4bd
Faulting process id: 0x0x46D8
Faulting application start time: 0x0x1D889FEBA1BEB54
Faulting application path: C:\Program Files\reWASD\reWASDService.exe
Faulting module path: C:\WINDOWS\System32\combase.dll
Report Id: 4ceca84a-2339-4e7d-bc9c-9261639c86f4
Faulting package full name: 
Faulting package-relative application ID: "