How does Microsoft generate the Event ID for winqual events?
        Posted  
        
            by Tim
        on Stack Overflow
        
        See other posts from Stack Overflow
        
            or by Tim
        
        
        
        Published on 2009-08-14T16:51:22Z
        Indexed on 
            2010/05/12
            17:54 UTC
        
        
        Read the original article
        Hit count: 338
        
I am curious about the IDs that are used to identify items in winqual.
I assume it is some sort of hash. Is this published?
Hash of the module name, its version and an offset?
That seems appropriate but the size is too small to cover the possibilities unless some truncation/lossy algorithm is used.
This seems to be generated with the minidump on the client machine.
© Stack Overflow or respective owner