Microsoft-Windows-WEPHOSTSVC
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | Service stopped with a failure: error code ErrorCode. | Operational | N | N |
| 2 | Could not load 3rd Party Dll : error code ErrorCode. | Operational | N | N |
| 300 | Service started | Operational | N | N |
| 301 | Service stopped | Operational | N | N |
Event ID 1: Service stopped with a failure: error code ErrorCode.
#Event ID 2: Could not load 3rd Party Dll : error code ErrorCode.
#Event ID 300: Service started
#Event ID 301: Service stopped
#Provenance
ETW provider GUID d5f7235b-48e2-4e9c-92fe-0e4950aba9e8
Defined in wephostsvc.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB