How does Microsoft generate the Event ID for winqual events?
Posted
by Tim
on Stack Overflow
See other posts from Stack Overflow
or by Tim
Published on 2009-08-14T16:51:22Z
Indexed on
2010/05/12
17:54 UTC
Read the original article
Hit count: 294
I am curious about the IDs that are used to identify items in winqual.
I assume it is some sort of hash. Is this published?
Hash of the module name, its version and an offset?
That seems appropriate but the size is too small to cover the possibilities unless some truncation/lossy algorithm is used.
This seems to be generated with the minidump on the client machine.
© Stack Overflow or respective owner