Log Name:      ApplicationSource:        Application ErrorDate:          01/09/2022 10:19:37Event ID:      1000
Task Category: (100)Level:         ErrorKeywords:      ClassicUser:          N/AComputer:      DESKTOP-f345
Description:
Faulting application name: mstsc.exe, version: 10.0.19041.1682, time stamp: 0xea45a8c9
Faulting module name: ntdll.dll, version: 10.0.19041.1806, time stamp: 0x1000a5b9
Exception code: 0xc000000d
Fault offset: 0x00000000001125e4
Faulting process id: 0x1b18
Faulting application start time: 0x01d8bde3e250393d
Faulting application path: C:\WINDOWS\system32\mstsc.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: eafd1fd0-d8c2-4e5c-a81c-d2fbd4f10fa5
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
          1000    0    2    100    0    0x80000000000000        18795            Application    DESKTOP-MSHAJAQ            mstsc.exe    10.0.19041.1682    ea45a8c9    ntdll.dll    10.0.19041.1806    1000a5b9    c000000d    00000000001125e4    1b18    01d8bde3e250393d    C:\WINDOWS\system32\mstsc.exe    C:\WINDOWS\SYSTEM32\ntdll.dll    eafd1fd0-d8c2-4e5c-a81c-d2fbd4f10fa5                  

---

Seems to correspond with:

Log Name:      ApplicationSource:        Windows Error ReportingDate:          01/09/2022 10:33:32Event ID:      1001
Task Category: NoneLevel:         InformationKeywords:      ClassicUser:          N/AComputer:      DESKTOP-f435gf4
Description:
Fault bucket 1674729131162082113, type 5
Event Name: BEX64
Response: Not available
Cab Id: 0

Problem signature:
P1: mstsc.exe
P2: 10.0.19041.1682
P3: ea45a8c9
P4: ntdll.dll
P5: 10.0.19041.1806
P6: 1000a5b9
P7: 00000000001125e4
P8: c000000d
P9: 0000000000000000
P10:

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3E2.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB625.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB655.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB662.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB692.tmp.txt
\\?\C:\Users\EmmaTaylor\AppData\Local\Temp\WERB6F3.tmp.appcompat.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_cab_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a\memory.hdmp

These files may be available here:
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a

Analysis symbol:
Rechecking for solution: 0
Report Id: af1fd1f5-4983-4cf3-b077-843173e5c57c
Report Status: 268435456
Hashed bucket: bf9095f63d7b6067273dd5458dea1b41
Cab Guid: 0
Event Xml:
          1001    0    4    0    0    0x80000000000000        18805            Application    DESKTOP-MSHAJAQ            1674729131162082113    5    BEX64    Not available    0    mstsc.exe    10.0.19041.1682    ea45a8c9    ntdll.dll    10.0.19041.1806    1000a5b9    00000000001125e4    c000000d    0000000000000000            
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3E2.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB625.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB655.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB662.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB692.tmp.txt
\\?\C:\Users\EmmaTaylor\AppData\Local\Temp\WERB6F3.tmp.appcompat.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_cab_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a\memory.hdmp    \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mstsc.exe_b0eb49242a20e813319289cddc52a9f71768899_f6e4f653_e1e3f0c6-d322-4d97-9f40-2ec6796ae37a            0    af1fd1f5-4983-4cf3-b077-843173e5c57c    268435456    bf9095f63d7b6067273dd5458dea1b41    0  

---

Is it an HP PC?

Does it have HP Simple Pass installed?

This seems to have been a culprit in crashing mstsc.exe

---