Forum Discussion

josh4500's avatar
josh4500
Copper Contributor
May 16, 2023

Windows 11 Beta build insider crashing

My PC just keeps crashing after updates (even after series of updates). I couldn't keep all the error codes but I was able to go through my PC event listeners to recover some logs.

 

The following logs are what I can see during one of the crashes.

 

I need help with this I can't work on my PC without it crashing after every 10 - 15 mins

 

 

 

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          5/16/2023 12:34:40 PM
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (70368744177664),(2)
User:          SYSTEM
Computer:      AJIBOLA
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" />
    <EventID>41</EventID>
    <Version>9</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000400000000002</Keywords>
    <TimeCreated SystemTime="2023-05-16T11:34:40.0454484Z" />
    <EventRecordID>171087</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>AJIBOLA</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">340</Data>
    <Data Name="BugcheckParameter1">0xffff80072342f000</Data>
    <Data Name="BugcheckParameter2">0x0</Data>
    <Data Name="BugcheckParameter3">0x0</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">0</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
    <Data Name="BootAppStatus">0</Data>
    <Data Name="Checkpoint">0</Data>
    <Data Name="ConnectedStandbyInProgress">false</Data>
    <Data Name="SystemSleepTransitionsToOn">0</Data>
    <Data Name="CsEntryScenarioInstanceId">0</Data>
    <Data Name="BugcheckInfoFromEFI">true</Data>
    <Data Name="CheckpointStatus">0</Data>
    <Data Name="CsEntryScenarioInstanceIdV2">0</Data>
    <Data Name="LongPowerButtonPressDetected">false</Data>
    <Data Name="LidReliability">false</Data>
    <Data Name="InputSuppressionState">0</Data>
    <Data Name="PowerButtonSuppressionState">0</Data>
    <Data Name="LidState">1</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          5/16/2023 12:34:40 PM
Event ID:      125
Task Category: (86)
Level:         Information
Keywords:      (32)
User:          SYSTEM
Computer:      AJIBOLA
Description:
ACPI thermal zone \_TZ.THM has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 0K             
_AC1 = 0K             
_AC2 = 0K             
_AC3 = 0K             
_AC4 = 0K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 380K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" />
    <EventID>125</EventID>
    <Version>4</Version>
    <Level>4</Level>
    <Task>86</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000020</Keywords>
    <TimeCreated SystemTime="2023-05-16T11:34:40.0420645Z" />
    <EventRecordID>171086</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>AJIBOLA</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ThermalZoneDeviceInstanceLength">8</Data>
    <Data Name="ThermalZoneDeviceInstance">\_TZ.THM</Data>
    <Data Name="_PSV">0</Data>
    <Data Name="_TC1">0</Data>
    <Data Name="_TC2">0</Data>
    <Data Name="_TSP">0</Data>
    <Data Name="_AC0">0</Data>
    <Data Name="_AC1">0</Data>
    <Data Name="_AC2">0</Data>
    <Data Name="_AC3">0</Data>
    <Data Name="_AC4">0</Data>
    <Data Name="_AC5">0</Data>
    <Data Name="_AC6">0</Data>
    <Data Name="_AC7">0</Data>
    <Data Name="_AC8">0</Data>
    <Data Name="_AC9">0</Data>
    <Data Name="_CRT">380</Data>
    <Data Name="_HOT">0</Data>
    <Data Name="MinimumThrottle">0</Data>
    <Data Name="_CR3">0</Data>
    <Data Name="OverThrottleThreshold">0</Data>
    <Data Name="DescriptionLength">0</Data>
    <Data Name="Description">
    </Data>
    <Data Name="_TZP">0</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          5/16/2023 12:34:39 PM
Event ID:      6
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      AJIBOLA
Description:
File System Filter 'npsvctrig' (10.0, <u+200e>1979<u+200e>-<u+200e>12<u+200e>-<u+200e>19T17:12:41.000000000Z) has successfully loaded and registered with Filter Manager.
Event Xml:
<lt;g Name:      System
Source:     Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"ger
Date:          5/16/2023 12:34:>gt;t xmlns="http://schemas.microsof
  ;t xmlns="http://schemas.microsoft.<lt;t xmlns="http://schemas.microsofSystemxmlns="http://schemas.microsoft.com>gt;emxmlns="http://schemas.microsof
    mxmlns="http://schemas.microsoft.co<lt; mxmlns="http://schemas.microsofProvider Name="Microsoft-Windows-FilterMm/win/2004/08/events/event"ger
Dateanager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" /vents/event"ger
Date:          5/16>gt;er" Guid="{f3c5e28e-63f6-49c7-a2
    r" Guid="{f3c5e28e-63f6-49c7-a204-e<lt; r" Guid="{f3c5e28e-63f6-49c7-a2EventID Guid="{f3c5e28e-63f6-49c7-a204-e48>gt;tID Guid="{f3c5e28e-63f6-49c7-a26gt;tID Guid="{f3c5e28e-63f6-49c7-a2<lt;tID Guid="{f3c5e28e-63f6-49c7-a2/EventIDGuid="{f3c5e28e-63f6-49c7-a204-e48a>gt;ntIDGuid="{f3c5e28e-63f6-49c7-a2
    tIDGuid="{f3c5e28e-63f6-49c7-a204-e<lt; tIDGuid="{f3c5e28e-63f6-49c7-a2VersionDGuid="{f3c5e28e-63f6-49c7-a204-e48>gt;ionDGuid="{f3c5e28e-63f6-49c7-a20gt;ionDGuid="{f3c5e28e-63f6-49c7-a2<lt;ionDGuid="{f3c5e28e-63f6-49c7-a2/VersionGuid="{f3c5e28e-63f6-49c7-a204-e48a>gt;sionGuid="{f3c5e28e-63f6-49c7-a2
    ionGuid="{f3c5e28e-63f6-49c7-a204-e<lt; ionGuid="{f3c5e28e-63f6-49c7-a2LevelionGuid="{f3c5e28e-63f6-49c7-a204-e>gt;lionGuid="{f3c5e28e-63f6-49c7-a24gt;lionGuid="{f3c5e28e-63f6-49c7-a2<lt;lionGuid="{f3c5e28e-63f6-49c7-a2/LevelonGuid="{f3c5e28e-63f6-49c7-a204-e4>gt;elonGuid="{f3c5e28e-63f6-49c7-a2
    lonGuid="{f3c5e28e-63f6-49c7-a204-e<lt; lonGuid="{f3c5e28e-63f6-49c7-a2Task lonGuid="{f3c5e28e-63f6-49c7-a204->gt; lonGuid="{f3c5e28e-63f6-49c7-a20gt; lonGuid="{f3c5e28e-63f6-49c7-a2<lt; lonGuid="{f3c5e28e-63f6-49c7-a2/TasklonGuid="{f3c5e28e-63f6-49c7-a204-e>gt;klonGuid="{f3c5e28e-63f6-49c7-a2
    lonGuid="{f3c5e28e-63f6-49c7-a204-e<lt; lonGuid="{f3c5e28e-63f6-49c7-a2OpcodeonGuid="{f3c5e28e-63f6-49c7-a204-e4>gt;deonGuid="{f3c5e28e-63f6-49c7-a20gt;deonGuid="{f3c5e28e-63f6-49c7-a2<lt;deonGuid="{f3c5e28e-63f6-49c7-a2/OpcodenGuid="{f3c5e28e-63f6-49c7-a204-e48>gt;odenGuid="{f3c5e28e-63f6-49c7-a2
    denGuid="{f3c5e28e-63f6-49c7-a204-e<lt; denGuid="{f3c5e28e-63f6-49c7-a2KeywordsGuid="{f3c5e28e-63f6-49c7-a204-e48a>gt;ordsGuid="{f3c5e28e-63f6-49c7-a20x80000000000000005e28e-63f6-49c7-a204-e48a1bc4b09d}"<lt;000000000000005e28e-63f6-49c7-a2/Keywords0000000005e28e-63f6-49c7-a204-e48a1>gt;words0000000005e28e-63f6-49c7-a2
    ords0000000005e28e-63f6-49c7-a204-e<lt; ords0000000005e28e-63f6-49c7-a2TimeCreated SystemTime="2023-05-16T11:34:39.9621975Z" /vents/event"ger
Date:          5/16>gt;Created SystemTime="2023-05-16T1
    reated SystemTime="2023-05-16T11:34<lt; reated SystemTime="2023-05-16T1EventRecordIDystemTime="2023-05-16T11:34:39.9621>gt;tRecordIDystemTime="2023-05-16T1171085ecordIDystemTime="2023-05-16T11:34:<lt;85ecordIDystemTime="2023-05-16T1/EventRecordIDstemTime="2023-05-16T11:34:39.96219>gt;ntRecordIDstemTime="2023-05-16T1
    tRecordIDstemTime="2023-05-16T11:34<lt; tRecordIDstemTime="2023-05-16T1Correlation /DstemTime="2023-05-16T11:34:39.9621>gt;elation /DstemTime="2023-05-16T1
    lation /DstemTime="2023-05-16T11:34<lt; lation /DstemTime="2023-05-16T1Execution ProcessID="4" ThreadID="8" /34:39.9621975Z" /vents/event"ger
Da>gt;ution ProcessID="4" ThreadID="8"
    tion ProcessID="4" ThreadID="8" /34<lt; tion ProcessID="4" ThreadID="8"Channelon ProcessID="4" ThreadID="8" /34:3>gt;nelon ProcessID="4" ThreadID="8"Systemlon ProcessID="4" ThreadID="8" /34:<lt;emlon ProcessID="4" ThreadID="8"/Channeln ProcessID="4" ThreadID="8" /34:39>gt;nneln ProcessID="4" ThreadID="8"
    neln ProcessID="4" ThreadID="8" /34<lt; neln ProcessID="4" ThreadID="8"Computern ProcessID="4" ThreadID="8" /34:39>gt;utern ProcessID="4" ThreadID="8"AJIBOLArn ProcessID="4" ThreadID="8" /34:3<lt;OLArn ProcessID="4" ThreadID="8"/Computer ProcessID="4" ThreadID="8" /34:39.>gt;puter ProcessID="4" ThreadID="8"
    uter ProcessID="4" ThreadID="8" /34<lt; uter ProcessID="4" ThreadID="8"Security UserID="S-1-5-18" /adID="8" /34:39.9621975Z" /vents/ev>gt;rity UserID="S-1-5-18" /adID="8"
  ;rity UserID="S-1-5-18" /adID="8" /<lt;rity UserID="S-1-5-18" /adID="8"/Systemy UserID="S-1-5-18" /adID="8" /34:3>gt;temy UserID="S-1-5-18" /adID="8"
  ;temy UserID="S-1-5-18" /adID="8" /<lt;temy UserID="S-1-5-18" /adID="8"EventDataUserID="S-1-5-18" /adID="8" /34:39.>gt;tDataUserID="S-1-5-18" /adID="8"
    DataUserID="S-1-5-18" /adID="8" /34<lt; DataUserID="S-1-5-18" /adID="8"Data Name="FinalStatus"18" /adID="8" /34:39.9621975Z" /ven>gt; Name="FinalStatus"18" /adID="8"0x0; Name="FinalStatus"18" /adID="8" /<lt; Name="FinalStatus"18" /adID="8"/DataName="FinalStatus"18" /adID="8" /34>gt;aName="FinalStatus"18" /adID="8"
    Name="FinalStatus"18" /adID="8" /34<lt; Name="FinalStatus"18" /adID="8"Data Name="DeviceVersionMajor"ID="8" /34:39.9621975Z" /vents/even>gt; Name="DeviceVersionMajor"ID="8"10t; Name="DeviceVersionMajor"ID="8" <lt; Name="DeviceVersionMajor"ID="8"/DataName="DeviceVersionMajor"ID="8" /34>gt;aName="DeviceVersionMajor"ID="8"
    Name="DeviceVersionMajor"ID="8" /34<lt; Name="DeviceVersionMajor"ID="8"Data Name="DeviceVersionMinor"ID="8" /34:39.9621975Z" /vents/even>gt; Name="DeviceVersionMinor"ID="8"0gt; Name="DeviceVersionMinor"ID="8"<lt; Name="DeviceVersionMinor"ID="8"/DataName="DeviceVersionMinor"ID="8" /34>gt;aName="DeviceVersionMinor"ID="8"
    Name="DeviceVersionMinor"ID="8" /34<lt; Name="DeviceVersionMinor"ID="8"Data Name="DeviceNameLength"r"ID="8" /34:39.9621975Z" /vents/ev>gt; Name="DeviceNameLength"r"ID="8"9gt; Name="DeviceNameLength"r"ID="8"<lt; Name="DeviceNameLength"r"ID="8"/DataName="DeviceNameLength"r"ID="8" /34>gt;aName="DeviceNameLength"r"ID="8"
    Name="DeviceNameLength"r"ID="8" /34<lt; Name="DeviceNameLength"r"ID="8"Data Name="DeviceName"ength"r"ID="8" /34:39.9621975Z" /ve>gt; Name="DeviceName"ength"r"ID="8"npsvctrig="DeviceName"ength"r"ID="8" /34:39.<lt;ctrig="DeviceName"ength"r"ID="8"/Datatrig="DeviceName"ength"r"ID="8" /34>gt;atrig="DeviceName"ength"r"ID="8"
    trig="DeviceName"ength"r"ID="8" /34<lt; trig="DeviceName"ength"r"ID="8"Data Name="DeviceTime"ength"r"ID="8" /34:39.9621975Z" /ve>gt; Name="DeviceTime"ength"r"ID="8"1979-12-19T17:12:41.0000000Zr"ID="8" /34:39.9621975Z" /vents/ev<lt;-12-19T17:12:41.0000000Zr"ID="8"/Data12-19T17:12:41.0000000Zr"ID="8" /34>gt;a12-19T17:12:41.0000000Zr"ID="8"
  ;a12-19T17:12:41.0000000Zr"ID="8" /<lt;a12-19T17:12:41.0000000Zr"ID="8"/EventDataT17:12:41.0000000Zr"ID="8" /34:39.9>gt;ntDataT17:12:41.0000000Zr"ID="8"
gt;ntDataT17:12:41.0000000Zr"ID="8"<lt;ntDataT17:12:41.0000000Zr"ID="8"/EventDataT17:12:41.0000000Zr"ID="8" /34:>gt;ntDataT17:12:41.0000000Zr"ID="8"

Log Name:      System
Source:        VfpExt
Date:          5/16/2023 12:34:39 PM
Event ID:      7036
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      AJIBOLA
Description:
The  service entered the Driver load complete state.
Event Xml:
12<u+200e>-<u+<lt;g Name:    Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"023 12:34:39 P>gt;t xmlns="ht
  ;t xmlns="http<lt;t xmlns="htSystemxmlns="http://>gt;emxmlns="ht
    mxmlns="http:/<lt; mxmlns="htProvider Name="VfpExt" /mas.microsoft.>gt;ider Name="
    der Name="VfpE<lt; der Name="EventID Qualifiers="16384"s.microsoft.co>gt;tID Qualifi7036tID Qualifiers<lt;tID Qualifi/EventIDQualifiers="16>gt;ntIDQualifi
    tIDQualifiers=<lt; tIDQualifiVersionDQualifiers="1>gt;ionDQualifi0gt;ionDQualifi<lt;ionDQualifi/VersionQualifiers="16>gt;sionQualifi
    ionQualifiers=<lt; ionQualifiLevelionQualifiers=>gt;lionQualifi4gt;lionQualifi<lt;lionQualifi/LevelonQualifiers=">gt;elonQualifi
    lonQualifiers=<lt; lonQualifiTask lonQualifiers>gt; lonQualifi0gt; lonQualifi<lt; lonQualifi/TasklonQualifiers=>gt;klonQualifi
    lonQualifiers=<lt; lonQualifiOpcodeonQualifiers=">gt;deonQualifi0gt;deonQualifi<lt;deonQualifi/OpcodenQualifiers="1>gt;odenQualifi
    denQualifiers=<lt; denQualifiKeywordsQualifiers="16>gt;ordsQualifi0x80000000000000rs="16384"s.mi<lt;00000000000/Keywords0000000rs="163>gt;words000000
    ords0000000rs=<lt; ords000000TimeCreated SystemTime="2023-05-16T11:34:39.8540926Z" /vents/event"02>gt;Created Sys
    reated SystemT<lt; reated SysEventRecordIDystemTime="202>gt;tRecordIDys171084ecordIDystemTi<lt;84ecordIDys/EventRecordIDstemTime="2023>gt;ntRecordIDs
    tRecordIDstemT<lt; tRecordIDsCorrelation /DstemTime="202>gt;elation /Ds
    lation /DstemT<lt; lation /DsExecution ProcessID="4" ThreadID="120" /:39.8540926Z" >gt;ution Proce
    tion ProcessID<lt; tion ProceChannelon ProcessID=">gt;nelon ProceSystemlon ProcessID=<lt;emlon Proce/Channeln ProcessID="4>gt;nneln Proce
    neln ProcessID<lt; neln ProceComputern ProcessID="4>gt;utern ProceAJIBOLArn ProcessID="<lt;OLArn Proce/Computer ProcessID="4">gt;puter Proce
    uter ProcessID<lt; uter ProceSecurity /ProcessID="4" >gt;rity /Proce
  ;rity /Process<lt;rity /Proce/Systemy /ProcessID=">gt;temy /Proce
  ;temy /Process<lt;temy /ProceEventData/ProcessID="4">gt;tData/Proce
    Data/ProcessID<lt; Data/ProceData Data/ProcessI>gt; Data/Proce
    Data/ProcessID<lt; Data/Proce/DataData/ProcessID>gt;aData/Proce
    Data/ProcessID<lt; Data/ProceData Data/ProcessI>gt; Data/ProceDriver load complete"4" ThreadID="<lt;er load com/Datar load complet>gt;ar load com
    r load complet<lt; r load comBinary load complete>gt;ry load com0000040002003000000000007C1B004000000000000000000000000000000000000000000000000057000600 ID:      7036<lt;04000200300/Binary00200300000000>gt;ary00200300
  ;ary0020030000<lt;ary00200300/EventData00300000000000>gt;ntData00300
gt;ntData00300<lt;ntData00300/EventData0030000000>gt;ntData00300

Log Name:      System
Source:        VfpExt
Date:          5/16/2023 12:34:39 PM
Event ID:      7036
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      AJIBOLA
Description:
The  service entered the Driver load start state.
Event Xml:
l:
12<u+200e>-<lt;g Name:    Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"023 12:34:39 P>gt;t xmlns="ht
  ;t xmlns="http<lt;t xmlns="htSystemxmlns="http://>gt;emxmlns="ht
    mxmlns="http:/<lt; mxmlns="htProvider Name="VfpExt" /mas.microsoft.>gt;ider Name="
    der Name="VfpE<lt; der Name="EventID Qualifiers="16384"s.microsoft.co>gt;tID Qualifi7036tID Qualifiers<lt;tID Qualifi/EventIDQualifiers="16>gt;ntIDQualifi
    tIDQualifiers=<lt; tIDQualifiVersionDQualifiers="1>gt;ionDQualifi0gt;ionDQualifi<lt;ionDQualifi/VersionQualifiers="16>gt;sionQualifi
    ionQualifiers=<lt; ionQualifiLevelionQualifiers=>gt;lionQualifi4gt;lionQualifi<lt;lionQualifi/LevelonQualifiers=">gt;elonQualifi
    lonQualifiers=<lt; lonQualifiTask lonQualifiers>gt; lonQualifi0gt; lonQualifi<lt; lonQualifi/TasklonQualifiers=>gt;klonQualifi
    lonQualifiers=<lt; lonQualifiOpcodeonQualifiers=">gt;deonQualifi0gt;deonQualifi<lt;deonQualifi/OpcodenQualifiers="1>gt;odenQualifi
    denQualifiers=<lt; denQualifiKeywordsQualifiers="16>gt;ordsQualifi0x80000000000000rs="16384"s.mi<lt;00000000000/Keywords0000000rs="163>gt;words000000
    ords0000000rs=<lt; ords000000TimeCreated SystemTime="2023-05-16T11:34:39.8540926Z" /vents/event"02>gt;Created Sys
    reated SystemT<lt; reated SysEventRecordIDystemTime="202>gt;tRecordIDys171083ecordIDystemTi<lt;83ecordIDys/EventRecordIDstemTime="2023>gt;ntRecordIDs
    tRecordIDstemT<lt; tRecordIDsCorrelation /DstemTime="202>gt;elation /Ds
    lation /DstemT<lt; lation /DsExecution ProcessID="4" ThreadID="120" /:39.8540926Z" >gt;ution Proce
    tion ProcessID<lt; tion ProceChannelon ProcessID=">gt;nelon ProceSystemlon ProcessID=<lt;emlon Proce/Channeln ProcessID="4>gt;nneln Proce
    neln ProcessID<lt; neln ProceComputern ProcessID="4>gt;utern ProceAJIBOLArn ProcessID="<lt;OLArn Proce/Computer ProcessID="4">gt;puter Proce
    uter ProcessID<lt; uter ProceSecurity /ProcessID="4" >gt;rity /Proce
  ;rity /Process<lt;rity /Proce/Systemy /ProcessID=">gt;temy /Proce
  ;temy /Process<lt;temy /ProceEventData/ProcessID="4">gt;tData/Proce
    Data/ProcessID<lt; Data/ProceData Data/ProcessI>gt; Data/Proce
    Data/ProcessID<lt; Data/Proce/DataData/ProcessID>gt;aData/Proce
    Data/ProcessID<lt; Data/ProceData Data/ProcessI>gt; Data/ProceDriver load startID="4" ThreadI<lt;er load sta/Datar load startID>gt;ar load sta
    r load startID<lt; r load staBinary load startID=>gt;ry load sta0000000002002C00000000007C1B0040000000000000000000000000000000000000000000000000PM
Event ID:  <lt;000002002C0/Binary002002C0000000>gt;ary002002C0
  ;ary002002C000<lt;ary002002C0/EventData002C0000000000>gt;ntData002C0
gt;ntData002C0<lt;ntData002C0/EventData002C000000>gt;ntData002C0

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          5/16/2023 12:34:39 PM
Event ID:      6
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      AJIBOLA
Description:
File System Filter 'FileCrypt' (10.0, <u+200e>1983<u+200e>-<u+200e>08<u+200e>-<u+200e>19T03:58:35.000000000Z) has successfully loaded and registered with Filter Manager.
Event Xml:
<lt;g Name:      System
Source:     Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"ger
Date:          5/16/2023 12:34:>gt;t xmlns="http://schemas.microsof
  ;t xmlns="http://schemas.microsoft.<lt;t xmlns="http://schemas.microsofSystemxmlns="http://schemas.microsoft.com>gt;emxmlns="http://schemas.microsof
    mxmlns="http://schemas.microsoft.co<lt; mxmlns="http://schemas.microsofProvider Name="Microsoft-Windows-FilterManager" G4/08/events/event"ger
Date:        uid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" /" G4/08/events/event"ger
Date:     >gt;"{f3c5e28e-63f6-49c7-a204-e48a1b
    {f3c5e28e-63f6-49c7-a204-e48a1bc4b0<lt; {f3c5e28e-63f6-49c7-a204-e48a1bEventID3c5e28e-63f6-49c7-a204-e48a1bc4b09d>gt;tID3c5e28e-63f6-49c7-a204-e48a1b6gt;tID3c5e28e-63f6-49c7-a204-e48a1b<lt;tID3c5e28e-63f6-49c7-a204-e48a1b/EventIDc5e28e-63f6-49c7-a204-e48a1bc4b09d}>gt;ntIDc5e28e-63f6-49c7-a204-e48a1b
    tIDc5e28e-63f6-49c7-a204-e48a1bc4b0<lt; tIDc5e28e-63f6-49c7-a204-e48a1bVersionDc5e28e-63f6-49c7-a204-e48a1bc4b09d>gt;ionDc5e28e-63f6-49c7-a204-e48a1b0gt;ionDc5e28e-63f6-49c7-a204-e48a1b<lt;ionDc5e28e-63f6-49c7-a204-e48a1b/Versionc5e28e-63f6-49c7-a204-e48a1bc4b09d}>gt;sionc5e28e-63f6-49c7-a204-e48a1b
    ionc5e28e-63f6-49c7-a204-e48a1bc4b0<lt; ionc5e28e-63f6-49c7-a204-e48a1bLevelionc5e28e-63f6-49c7-a204-e48a1bc4b0>gt;lionc5e28e-63f6-49c7-a204-e48a1b4gt;lionc5e28e-63f6-49c7-a204-e48a1b<lt;lionc5e28e-63f6-49c7-a204-e48a1b/Levelonc5e28e-63f6-49c7-a204-e48a1bc4b09>gt;elonc5e28e-63f6-49c7-a204-e48a1b
    lonc5e28e-63f6-49c7-a204-e48a1bc4b0<lt; lonc5e28e-63f6-49c7-a204-e48a1bTask lonc5e28e-63f6-49c7-a204-e48a1bc4b>gt; lonc5e28e-63f6-49c7-a204-e48a1b0gt; lonc5e28e-63f6-49c7-a204-e48a1b<lt; lonc5e28e-63f6-49c7-a204-e48a1b/Tasklonc5e28e-63f6-49c7-a204-e48a1bc4b0>gt;klonc5e28e-63f6-49c7-a204-e48a1b
    lonc5e28e-63f6-49c7-a204-e48a1bc4b0<lt; lonc5e28e-63f6-49c7-a204-e48a1bOpcodeonc5e28e-63f6-49c7-a204-e48a1bc4b09>gt;deonc5e28e-63f6-49c7-a204-e48a1b0gt;deonc5e28e-63f6-49c7-a204-e48a1b<lt;deonc5e28e-63f6-49c7-a204-e48a1b/Opcodenc5e28e-63f6-49c7-a204-e48a1bc4b09d>gt;odenc5e28e-63f6-49c7-a204-e48a1b
    denc5e28e-63f6-49c7-a204-e48a1bc4b0<lt; denc5e28e-63f6-49c7-a204-e48a1bKeywordsc5e28e-63f6-49c7-a204-e48a1bc4b09d}>gt;ordsc5e28e-63f6-49c7-a204-e48a1b0x80000000000000006-49c7-a204-e48a1bc4b09d}" /" G4/08<lt;000000000000006-49c7-a204-e48a1b/Keywords0000000006-49c7-a204-e48a1bc4b09d}">gt;words0000000006-49c7-a204-e48a1b
    ords0000000006-49c7-a204-e48a1bc4b0<lt; ords0000000006-49c7-a204-e48a1bTimeCreated SystemTime="2023-05-16T11:34:39.5792684Z" /vents/event"ger
Date:          5/16>gt;Created SystemTime="2023-05-16T1
    reated SystemTime="2023-05-16T11:34<lt; reated SystemTime="2023-05-16T1EventRecordIDystemTime="2023-05-16T11:34:39.5792>gt;tRecordIDystemTime="2023-05-16T1171082ecordIDystemTime="2023-05-16T11:34:<lt;82ecordIDystemTime="2023-05-16T1/EventRecordIDstemTime="2023-05-16T11:34:39.57926>gt;ntRecordIDstemTime="2023-05-16T1
    tRecordIDstemTime="2023-05-16T11:34<lt; tRecordIDstemTime="2023-05-16T1Correlation /DstemTime="2023-05-16T11:34:39.5792>gt;elation /DstemTime="2023-05-16T1
    lation /DstemTime="2023-05-16T11:34<lt; lation /DstemTime="2023-05-16T1Execution ProcessID="4" ThreadID="8" /34:39.5792684Z" /vents/event"ger
Da>gt;ution ProcessID="4" ThreadID="8"
    tion ProcessID="4" ThreadID="8" /34<lt; tion ProcessID="4" ThreadID="8"Channelon ProcessID="4" ThreadID="8" /34:3>gt;nelon ProcessID="4" ThreadID="8"Systemlon ProcessID="4" ThreadID="8" /34:<lt;emlon ProcessID="4" ThreadID="8"/Channeln ProcessID="4" ThreadID="8" /34:39>gt;nneln ProcessID="4" ThreadID="8"
    neln ProcessID="4" ThreadID="8" /34<lt; neln ProcessID="4" ThreadID="8"Computern ProcessID="4" ThreadID="8" /34:39>gt;utern ProcessID="4" ThreadID="8"AJIBOLArn ProcessID="4" ThreadID="8" /34:3<lt;OLArn ProcessID="4" ThreadID="8"/Computer ProcessID="4" ThreadID="8" /34:39.>gt;puter ProcessID="4" ThreadID="8"
    uter ProcessID="4" ThreadID="8" /34<lt; uter ProcessID="4" ThreadID="8"Security UserID="S-1-5-18" /adID="8" /34:39.5792684Z" /vents/ev>gt;rity UserID="S-1-5-18" /adID="8"
  ;rity UserID="S-1-5-18" /adID="8" /<lt;rity UserID="S-1-5-18" /adID="8"/Systemy UserID="S-1-5-18" /adID="8" /34:3>gt;temy UserID="S-1-5-18" /adID="8"
  ;temy UserID="S-1-5-18" /adID="8" /<lt;temy UserID="S-1-5-18" /adID="8"EventDataUserID="S-1-5-18" /adID="8" /34:39.>gt;tDataUserID="S-1-5-18" /adID="8"
    DataUserID="S-1-5-18" /adID="8" /34<lt; DataUserID="S-1-5-18" /adID="8"Data Name="FinalStatus"18" /adID="8" /34:39.5792684Z" /ven>gt; Name="FinalStatus"18" /adID="8"0x0; Name="FinalStatus"18" /adID="8" /<lt; Name="FinalStatus"18" /adID="8"/DataName="FinalStatus"18" /adID="8" /34>gt;aName="FinalStatus"18" /adID="8"
    Name="FinalStatus"18" /adID="8" /34<lt; Name="FinalStatus"18" /adID="8"Data Name="DeviceVersionMajor"ID="8" /34:39.5792684Z" /vents/even>gt; Name="DeviceVersionMajor"ID="8"10t; Name="DeviceVersionMajor"ID="8" <lt; Name="DeviceVersionMajor"ID="8"/DataName="DeviceVersionMajor"ID="8" /34>gt;aName="DeviceVersionMajor"ID="8"
    Name="DeviceVersionMajor"ID="8" /34<lt; Name="DeviceVersionMajor"ID="8"Data Name="DeviceVersionMinor"ID="8" /34:39.5792684Z" /vents/even>gt; Name="DeviceVersionMinor"ID="8"0gt; Name="DeviceVersionMinor"ID="8"<lt; Name="DeviceVersionMinor"ID="8"/DataName="DeviceVersionMinor"ID="8" /34>gt;aName="DeviceVersionMinor"ID="8"
    Name="DeviceVersionMinor"ID="8" /34<lt; Name="DeviceVersionMinor"ID="8"Data Name="DeviceNameLength"r"ID="8" /34:39.5792684Z" /vents/ev>gt; Name="DeviceNameLength"r"ID="8"9gt; Name="DeviceNameLength"r"ID="8"<lt; Name="DeviceNameLength"r"ID="8"/DataName="DeviceNameLength"r"ID="8" /34>gt;aName="DeviceNameLength"r"ID="8"
    Name="DeviceNameLength"r"ID="8" /34<lt; Name="DeviceNameLength"r"ID="8"Data Name="DeviceName"ength"r"ID="8" /34:39.5792684Z" /ve>gt; Name="DeviceName"ength"r"ID="8"FileCrypt="DeviceName"ength"r"ID="8" /34:39.<lt;Crypt="DeviceName"ength"r"ID="8"/Datarypt="DeviceName"ength"r"ID="8" /34>gt;arypt="DeviceName"ength"r"ID="8"
    rypt="DeviceName"ength"r"ID="8" /34<lt; rypt="DeviceName"ength"r"ID="8"Data Name="DeviceTime"ength"r"ID="8" /34:39.5792684Z" /ve>gt; Name="DeviceTime"ength"r"ID="8"1983-08-19T03:58:35.0000000Zr"ID="8" /34:39.5792684Z" /vents/ev<lt;-08-19T03:58:35.0000000Zr"ID="8"/Data08-19T03:58:35.0000000Zr"ID="8" /34>gt;a08-19T03:58:35.0000000Zr"ID="8"
  ;a08-19T03:58:35.0000000Zr"ID="8" /<lt;a08-19T03:58:35.0000000Zr"ID="8"/EventDataT03:58:35.0000000Zr"ID="8" /34:39.5>gt;ntDataT03:58:35.0000000Zr"ID="8"
gt;ntDataT03:58:35.0000000Zr"ID="8"<lt;ntDataT03:58:35.0000000Zr"ID="8"/EventDataT03:58:35.0000000Zr"ID="8" /34:>gt;ntDataT03:58:35.0000000Zr"ID="8"

Log Name:      System
Source:        volmgr
Date:          5/16/2023 12:34:39 PM
Event ID:      161
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      AJIBOLA
Description:
Dump file creation failed due to error during dump creation.
Event Xml:
8<u+200e>-<u+2<lt;g Name:    Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"023 12:34:39 P>gt;t xmlns="ht
  ;t xmlns="http<lt;t xmlns="htSystemxmlns="http://>gt;emxmlns="ht
    mxmlns="http:/<lt; mxmlns="htProvider Name="volmgr" /mas.microsoft.>gt;ider Name="
    der Name="volm<lt; der Name="EventID Qualifiers="49156"s.microsoft.co>gt;tID Qualifi161;tID Qualifier<lt;tID Qualifi/EventIDQualifiers="49>gt;ntIDQualifi
    tIDQualifiers=<lt; tIDQualifiVersionDQualifiers="4>gt;ionDQualifi0gt;ionDQualifi<lt;ionDQualifi/VersionQualifiers="49>gt;sionQualifi
    ionQualifiers=<lt; ionQualifiLevelionQualifiers=>gt;lionQualifi2gt;lionQualifi<lt;lionQualifi/LevelonQualifiers=">gt;elonQualifi
    lonQualifiers=<lt; lonQualifiTask lonQualifiers>gt; lonQualifi0gt; lonQualifi<lt; lonQualifi/TasklonQualifiers=>gt;klonQualifi
    lonQualifiers=<lt; lonQualifiOpcodeonQualifiers=">gt;deonQualifi0gt;deonQualifi<lt;deonQualifi/OpcodenQualifiers="4>gt;odenQualifi
    denQualifiers=<lt; denQualifiKeywordsQualifiers="49>gt;ordsQualifi0x80000000000000rs="49156"s.mi<lt;00000000000/Keywords0000000rs="491>gt;words000000
    ords0000000rs=<lt; ords000000TimeCreated SystemTime="2023-05-16T11:34:39.4790609Z" /vents/event"02>gt;Created Sys
    reated SystemT<lt; reated SysEventRecordIDystemTime="202>gt;tRecordIDys171081ecordIDystemTi<lt;81ecordIDys/EventRecordIDstemTime="2023>gt;ntRecordIDs
    tRecordIDstemT<lt; tRecordIDsCorrelation /DstemTime="202>gt;elation /Ds
    lation /DstemT<lt; lation /DsExecution ProcessID="4" ThreadID="184" /:39.4790609Z" >gt;ution Proce
    tion ProcessID<lt; tion ProceChannelon ProcessID=">gt;nelon ProceSystemlon ProcessID=<lt;emlon Proce/Channeln ProcessID="4>gt;nneln Proce
    neln ProcessID<lt; neln ProceComputern ProcessID="4>gt;utern ProceAJIBOLArn ProcessID="<lt;OLArn Proce/Computer ProcessID="4">gt;puter Proce
    uter ProcessID<lt; uter ProceSecurity /ProcessID="4" >gt;rity /Proce
  ;rity /Process<lt;rity /Proce/Systemy /ProcessID=">gt;temy /Proce
  ;temy /Process<lt;temy /ProceEventDay /ProcessID="taentDay /Proces>gt;tDay /Proce
    Day /ProcessID<lt; Day /ProceData Day /ProcessI>gt; Day /Proce\Device\HarddiskVolume3 ThreadID="184<lt;ice\Harddis/Datace\HarddiskVol>gt;ace\Harddis
    ce\HarddiskVol<lt; ce\HarddisBinarye\HarddiskVolu>gt;rye\Harddis000000000100000000000000A10004C042000400010000C000000000000000000000000000000000PM
Event ID:  <lt;00000100000/Binary00100000000000>gt;ary00100000
  ;ary0010000000<lt;ary00100000/EventData00000000000000>gt;ntData00000
gt;ntData00000<lt;ntData00000/EventData0000000000>gt;ntData00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

 nbsp;Data00000

No RepliesBe the first to reply

Resources