Application Log

Log Name:      Application
Source:        VSS
Date:          10/17/2016 11:14:45 PM
Event ID:      8224
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      mineOS
Description:
The VSS service is shutting down due to idle timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8224</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-10-18T03:14:45.000000000Z" />
    <EventRecordID>15341</EventRecordID>
    <Channel>Application</Channel>
    <Computer>mineOS</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Binary>2D20436F64653A2020434F525356434330303030303736382D2043616C6C3A2020434F525356434330303030303735302D205049443A202030303030353031322D205449443A202030303030353837362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
  </EventData>
</Event>

- System

  - Provider

   [ Name]  VSS

  - EventID 8224

   [ Qualifiers]  0

   Level 4

   Task 0

   Keywords 0x80000000000000

  - TimeCreated

   [ SystemTime]  2016-10-18T03:14:45.000000000Z

   EventRecordID 15341

   Channel Application

   Computer mineOS

   Security


- EventData


   2D20436F64653A2020434F525356434330303030303736382D2043616C6C3A2020434F525356434330303030303735302D205049443A202030303030353031322D205449443A202030303030353837362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820


--------------------------------------------------------------------------------

Binary data:


In Words

0000: 6F43202D 203A6564 524F4320 43435653
0008: 30303030 38363730 6143202D 203A6C6C
0010: 524F4320 43435653 30303030 30353730
0018: 4950202D 20203A44 30303030 32313035
0020: 4954202D 20203A44 30303030 36373835
0028: 4D43202D 20203A44 575C3A43 6F646E69
0030: 735C7377 65747379 5C32336D 76737376
0038: 78652E63 20202065 7355202D 203A7265
0040: 656D614E 544E203A 54554120 49524F48
0048: 535C5954 45545359 53202C4D 533A4449
0050: 352D312D 2038312D


In Bytes

0000: 2D 20 43 6F 64 65 3A 20   - Code:
0008: 20 43 4F 52 53 56 43 43    CORSVCC
0010: 30 30 30 30 30 37 36 38   00000768
0018: 2D 20 43 61 6C 6C 3A 20   - Call:
0020: 20 43 4F 52 53 56 43 43    CORSVCC
0028: 30 30 30 30 30 37 35 30   00000750
0030: 2D 20 50 49 44 3A 20 20   - PID:
0038: 30 30 30 30 35 30 31 32   00005012
0040: 2D 20 54 49 44 3A 20 20   - TID:
0048: 30 30 30 30 35 38 37 36   00005876
0050: 2D 20 43 4D 44 3A 20 20   - CMD:
0058: 43 3A 5C 57 69 6E 64 6F   C:\Windo
0060: 77 73 5C 73 79 73 74 65   ws\syste
0068: 6D 33 32 5C 76 73 73 76   m32\vssv
0070: 63 2E 65 78 65 20 20 20   c.exe
0078: 2D 20 55 73 65 72 3A 20   - User:
0080: 4E 61 6D 65 3A 20 4E 54   Name: NT
0088: 20 41 55 54 48 4F 52 49    AUTHORI
0090: 54 59 5C 53 59 53 54 45   TY\SYSTE
0098: 4D 2C 20 53 49 44 3A 53   M, SID:S
00a0: 2D 31 2D 35 2D 31 38 20   -1-5-18