Elastic Windows Event Explorer


Publisher - Microsoft-Windows-RestartManager

Event ID 10006

Message:

Application or service '%{DisplayName}' could not be shut down.

Event Data:

# Name In Type
Out Type
1 RmSessionId win:UInt32 xs:unsignedInt
2 FullPath win:UnicodeString xs:string
3 DisplayName win:UnicodeString xs:string
4 AppVersion win:UInt32 xs:unsignedInt
5 AppType win:UInt32 xs:unsignedInt
6 TSSessionId win:UInt32 xs:unsignedInt
7 Status win:UInt32 xs:unsignedInt
8 Pid win:UInt32 xs:unsignedInt
9 nFiles win:UInt32 xs:unsignedInt
10 File win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 435VXNOYQYQDA