Seen on:
- Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)
- Windows 11 (21H2)
- Windows 2012
- Windows 8.1
| Log source(s): | Microsoft-Windows-Kernel-ShimEngine |
| Identifier: | {0bf2fb94-7b60-4b4d-9766-e82f658df540} |
| Event message file(s): | %systemroot%\system32\microsoft-windows-system-events.dll |
Seen on:
- Windows 8.0
| Log source(s): | Microsoft-Windows-Kernel-ShimEngine |
| Identifier: | {0bf2fb94-7b60-4b4d-9766-e82f658df540} |
| Event message file(s): | %systemroot%\system32\advapi32.dll |