- System
- Provider
[ Name] Microsoft-Windows-Kernel-General
[ Guid] {A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}
EventID 6
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2013-07-13T11:17:43.339166800Z
EventRecordID 1424
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 8
Channel System
Computer loken03
- Security
[ UserID] S-1-5-18
- EventData
FinalStatus 0xc000014d
ExtraStringLength 0
ExtraString
- System
- Provider
[ Name] volmgr
- EventID 46
[ Qualifiers] 49156
Level 2
Task 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2013-07-13T11:17:43.339166800Z
EventRecordID 1425
Channel System
Computer loken03
Security
- EventData
\Device\HarddiskVolume2
0000000001000000000000002E0004C0091000000F0000C000000000000000000000000000000000
--------------------------------------------------------------------------------
二進位資料:
以字數
0000: 00000000 00000001 00000000 C004002E
0008: 00001009 C000000F 00000000 00000000
0010: 00000000 00000000
以位元組
0000: 00 00 00 00 01 00 00 00 ........
0008: 00 00 00 00 2E 00 04 C0 .......À
0010: 09 10 00 00 0F 00 00 C0 .......À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
- System
- Provider
[ Name] EventLog
- EventID 6008
[ Qualifiers] 32768
Level 2
Task 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2013-07-13T11:17:56.000000000Z
EventRecordID 1426
Channel System
Computer loken03
Security
- EventData
下午 07:16:28
2013/7/13
1335
DD07070006000D00130010001C00FA02DD07070006000D000B0010001C00FA023C0000003C000000000000000000000000000000000000000100000000000000
--------------------------------------------------------------------------------
二進位資料:
以字數
0000: 000707DD 000D0006 00100013 02FA001C
0008: 000707DD 000D0006 0010000B 02FA001C
0010: 0000003C 0000003C 00000000 00000000
0018: 00000000 00000000 00000001 00000000
以位元組
0000: DD 07 07 00 06 00 0D 00 Ý.......
0008: 13 00 10 00 1C 00 FA 02 ......ú.
0010: DD 07 07 00 06 00 0D 00 Ý.......
0018: 0B 00 10 00 1C 00 FA 02 ......ú.
0020: 3C 00 00 00 3C 00 00 00 <...<...
0028: 00 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 00 00 00 00 ........
0038: 01 00 00 00 00 00 00 00 ........
- System
- Provider
[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID 41
Version 3
Level 1
Task 63
Opcode 0
Keywords 0x8000000000000002
- TimeCreated
[ SystemTime] 2013-07-13T11:17:43.667309200Z
EventRecordID 1432
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 8
Channel System
Computer loken03
- Security
[ UserID] S-1-5-18
- EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress 0
PowerButtonTimestamp 0
BootAppStatus 0
