> Source: [sk183699](https://support.checkpoint.com/results/sk/sk183699)

# sk183699 - Identity Collector Appcrash logs in Event Viewer

| Property | Value |
|----------|-------|
| Solution ID | sk183699 |
| Date Created | 2025-08-29 |
| Last Modified | 2025-08-31 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Windows |
| Platform | Open Server |

## Symptoms

- * The Windows Event Log contains repeated APPCRASH entries for the Identity Collector *cpidc.exe* process, sometimes referencing older Identity Collector versions.
* After upgrade to the latest Identity Collector version, the Windows Event Log does not show new crash dump files, but APPCRASH logs continue to appear.

## Cause

The Windows Error Reporting (WER) queue was processing and reporting legacy crash events from previous Identity Collector versions. This resulted in persistent APPCRASH entries in the Windows Event Log, even after upgrading Identity Collector and stabilizing the service.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content