How does Microsoft generate the Event ID for winqual events?

Posted by Tim on Stack Overflow See other posts from Stack Overflow or by Tim
Published on 2009-08-14T16:51:22Z Indexed on 2010/05/12 17:54 UTC
Read the original article Hit count: 266

Filed under:
|
|
|

I am curious about the IDs that are used to identify items in winqual.

I assume it is some sort of hash. Is this published?

Hash of the module name, its version and an offset?

That seems appropriate but the size is too small to cover the possibilities unless some truncation/lossy algorithm is used.

This seems to be generated with the minidump on the client machine.

© Stack Overflow or respective owner

Related posts about winqual

Related posts about hash